General

  • Target

    00b64218435a7d824b2197005f0b8880_NEAS

  • Size

    1.5MB

  • MD5

    00b64218435a7d824b2197005f0b8880

  • SHA1

    31d150d919361c0087e15888ac91d5962d334ad7

  • SHA256

    f5307888bc1b1acbfc33f3b22f848a9e5c0cceae29514a9f5653fc748cabeb0a

  • SHA512

    f1da4f5b9d971230b5515ce7ced04eac947eefed49d2e830ff3574e2c4ae24ba38c64589cecea5324354215ed874968bf448812fbcc981830ea4bd4f7f48d215

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwxOpyinKCB9WIoC3IT5xHvHsaXiJR/VdQNP:knw9oUUEEDlnCNfeT5J0aXiJwXgA

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00b64218435a7d824b2197005f0b8880_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections