General

  • Target

    c79fe58570877b8965a818a06e01e8f0_NEAS

  • Size

    1.8MB

  • MD5

    c79fe58570877b8965a818a06e01e8f0

  • SHA1

    73d91cae6b4738f951f2f4dd0619037bff8559dc

  • SHA256

    135dd20fe178ccbf231eaf4c74fc3a265e9d34f406f9fe45ffbf7922a6d11466

  • SHA512

    582213bc180130d0daa61d9a9864454010c345aedd8745d4f8f470754a3269d6129c0941aae6da5267866258a6df98afe70bce642cfeb2f8bde6fa4405ac7994

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhn3AXXiuNmj9zEwkAaNoMkNWv4tgPpP:knw9oUUEEDlGUJ8YhOX0zEfAaNoTE3

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c79fe58570877b8965a818a06e01e8f0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections