General

  • Target

    a83ee642b817e8cf0c27ec9f4e7a9c60_NEAS

  • Size

    1.5MB

  • MD5

    a83ee642b817e8cf0c27ec9f4e7a9c60

  • SHA1

    12ec4e699646e22726e6be1433ec46aabc1345a2

  • SHA256

    5feff956df9b382cd4c63c2680d4e71dc84745dd2f0730f9b940db02786c90b3

  • SHA512

    d071acf11eb0dd8670264643d287d7b2b61e2ad4d21eafc2476edfeb0573266912da325c576ba293a414ebc21319992918de794079ceb4801ca548f5fb65c7ff

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbruh/lzapbFe6LmsD8JNHonEXUbe6TmT4lx70:ROdWCCi7/rahlqOllgoJsTnfHx7nf8

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a83ee642b817e8cf0c27ec9f4e7a9c60_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections