General

  • Target

    881b22bff085a518e350b6976dc9c160_NEAS

  • Size

    1.7MB

  • MD5

    881b22bff085a518e350b6976dc9c160

  • SHA1

    a8a18e989dcd43c6cf3be111566de9f843c00e35

  • SHA256

    4f7c30b037f16681728f2c0e7b36c24bd4453419e26214bb179c9dc497a02d8c

  • SHA512

    290cae734f62398ae23810fbeed10f931b72116510545cb9637af7d7eaa4fa0e4a40189c03d12f7657abbe930ea376d0ec051a0f53f0e353e4ae311cb4c3122e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipBh8tGxHIBWGlTqTGzk+lOagppeRbptKquxf:Lz071uv4BPMkiFGlObO1Equl

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 881b22bff085a518e350b6976dc9c160_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections