General

  • Target

    5b9303ff35cf9fe497544ed9f8c3e0c0_NEAS

  • Size

    1.3MB

  • MD5

    5b9303ff35cf9fe497544ed9f8c3e0c0

  • SHA1

    a423a3c2a4608da905084103588f58040219f1c8

  • SHA256

    afa06c851b786ccd3e4084f16b6236b262e0bce10f15ce7b96e502e715b9e964

  • SHA512

    c5d7b311867ab67f45a0dc6134025b195868b6bc04b0d685eb6cffed534eb1758b4375d272c3c82fa019ba21e1cb2cb7fe4963edb5994c2e5c8c07ab91deac5e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zcI3vG5Q1jMb8X7z2:knw9oUUEEDl37jcq4xG5QW

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b9303ff35cf9fe497544ed9f8c3e0c0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections