General

  • Target

    5a59cecc8d758d828390e9224851f1f0_NEAS

  • Size

    1.9MB

  • MD5

    5a59cecc8d758d828390e9224851f1f0

  • SHA1

    8ddb5206d349dbc3285cac1143e64df7158e85a2

  • SHA256

    7e5ac83a53d9f608491197cbc154374039b04bee94be4caff21b2b8016c96a37

  • SHA512

    e7de52757fc9a97c922a10e2cdaa619a7318faa74b418669ced0b2fb0903c02bc26ee771fe3f1ef1466c42408b4863cd38f1c4d3713267e8258b119c30c15362

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI6ElxjXbCwsLi+5:knw9oUUEEDlGUJ8Y9ctYVk6+vT9B+

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a59cecc8d758d828390e9224851f1f0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections