General

  • Target

    b5392b484c3b02c27dcc7be2f6fe0cc0_NEAS

  • Size

    1.5MB

  • MD5

    b5392b484c3b02c27dcc7be2f6fe0cc0

  • SHA1

    833f186a52bb4cf87c351de795fc7ca367bcbbfc

  • SHA256

    5730ffc6a7466509111de455f81a15583f8c000fa40e805305d3f11c495133ed

  • SHA512

    3967696a6af22164ac5a573f430f0104091343d72734ff1cfe0e072d387e1b5ca50cab786a63c47e30d9d72ad632262305f2f718404d84f724f1a3f54ffa829f

  • SSDEEP

    24576:RVIl/WDGCi7/qkat62wT83PzKgAm0PyFLb/PwCumXox41HbaCk7zIh+:ROdWCCi7/ra+GvAnCumbkzIh+

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5392b484c3b02c27dcc7be2f6fe0cc0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections