General

  • Target

    db13df89e416de85f8b907009ec77000_NEAS

  • Size

    1.6MB

  • MD5

    db13df89e416de85f8b907009ec77000

  • SHA1

    ee6864c8d6abc0bee019230e31f9321cded1b493

  • SHA256

    832fa5d2dab3eddefc851cc42f183cf2a7cc022296e3974cd8a5421a4d61e104

  • SHA512

    19445638527c114a94b8653f91901e878bc70718617e4c7648259660d27c3f5bf9214bd18ee4b5dd18264ceafd6c0d230ee791cbf9a04a2174845d08ac68a8e7

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTW0hm3+Aj7W5W:knw9oUUEEDlGUJ8Y9c87Mehz

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db13df89e416de85f8b907009ec77000_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections