General

  • Target

    ce3bfdb6a048011fc6afbdbfa1030e50_NEAS

  • Size

    1.9MB

  • MD5

    ce3bfdb6a048011fc6afbdbfa1030e50

  • SHA1

    f0f857c4f7b3a187f17a9adc2a2a65cc4f62733b

  • SHA256

    c728c9fa9c77130e87817a1acb8b1c6cab212f4695984b822922297f468782a0

  • SHA512

    add1c883f5dd60d1cdb77f93c1069242d2aa09fcfc8fa074a5bd8584f994661004f413cc23777a403fd1122bcf3817901ea5e1c41d269bb6a951214bf07dd4bf

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMKPFo4BwHMqgTZ:RWWBib356utgpPFoM

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ce3bfdb6a048011fc6afbdbfa1030e50_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections