General

  • Target

    a1293ba52e950ec7f5ce9a814b020c20_NEAS

  • Size

    1.5MB

  • MD5

    a1293ba52e950ec7f5ce9a814b020c20

  • SHA1

    b524327e5922e38b67bcf4c21e33aa6ae39b09ea

  • SHA256

    1aa655385a4b7996cb7278aeba73e21ee8201d5b21aea0b8289f7946a2695d6a

  • SHA512

    23a7f50cbf01cf9761e8b5f1e3f9804c1213386aba9e8950aaef5af2bb253b48ed153f74bac12d035f85194eee56bd6b938d9336838cea8f6856b6bcb980ac5d

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdUK6S1uBkr5GqlfiQzf0Y098Id:Lz071uv4BPMkHC0I6Gz3N1pHVfyv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a1293ba52e950ec7f5ce9a814b020c20_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections