General

  • Target

    894adc18daad8e7b7e7984c98f12c210_NEAS

  • Size

    1.5MB

  • MD5

    894adc18daad8e7b7e7984c98f12c210

  • SHA1

    421f50d2859b0821e67b8eef3d0212326372ea3a

  • SHA256

    2350d31c05a7c5728a93545acae152330e6bea570644c32da602eda565a1ecc0

  • SHA512

    fa149f68299455d4f7d7e95ba79c84a9cf48b4351226ca5c8ec0a89f3dd2ba64a024bb155bc4ab34446ab10765d7fbbeb7cf8515f09fc4dcc01eeae196de52c0

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7fI+BJad5wOk:Lz071uv4BPMkyW10/w16BvZXB4k

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 894adc18daad8e7b7e7984c98f12c210_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections