General

  • Target

    a4603cf9c93020fdfe4b38c548ff6940_NEAS

  • Size

    1.7MB

  • MD5

    a4603cf9c93020fdfe4b38c548ff6940

  • SHA1

    7babffcd621013d374881988cc150b90b6c6f77f

  • SHA256

    23e3f6b0ad1ecc30ef162909b123ba5cf3e96901c139f13cc7f297f535002081

  • SHA512

    c0cf04b0b5ba9e1ea65f7c36e9d1a3d4f5efd1914858ec9ee7fc2677cc2bf502b1193de50390cdcf1d0cd4775bb83d3728b71fe8504764ea7400cb737bcc254c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjHiDxwkc:knw9oUUEEDlGUJ8Y9ctYVk68NdzK7jB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a4603cf9c93020fdfe4b38c548ff6940_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections