General

  • Target

    f23f1a879401c3b53d7a43be89d59bb0_NEAS

  • Size

    1.5MB

  • MD5

    f23f1a879401c3b53d7a43be89d59bb0

  • SHA1

    b44ae89dc3a7c21215fa4ce59ff3f2784b91ed95

  • SHA256

    248eab10c590b42f54d51348abb6a35a688b44e2024fce6cc3c80e8d39debaaa

  • SHA512

    c1b49a30dbe4dfb9220269223d887643a086eefb8c62aa551b378080d0b5f63cc2fd38a4712a4c51a7b54039dbfed0b70fd8a47c125bd7b1d4b9eaaf330059ff

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0L0+Eqq31vkMOexG4GOlwQf6zErfc8Fl:knw9oUUEEDlOuJUJGFQfKErftFl

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f23f1a879401c3b53d7a43be89d59bb0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections