General

  • Target

    0d25948b97a992fd8274e7fe1a1b5220_NEAS

  • Size

    1.4MB

  • MD5

    0d25948b97a992fd8274e7fe1a1b5220

  • SHA1

    19e7f7fab59b17f3187549acb5fb34c38d776d31

  • SHA256

    d41c728603d02b67f8ae86e0123859c3d76c333802b3cbce4ad7b698f6a6a184

  • SHA512

    ffbc8d278b95deca44b5a774ae3d331714ab326382e14cb773ab60bcb22dc18058d69936ca0c41b04f85410bdb6e05c43ae352fc448f5c08f773803ec00693f1

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727Zvhwo01xDS1ud7fHxokbysEoMR9XshRmPbW1Ne:ROdWCCi7/rahFBIHF5mCe

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d25948b97a992fd8274e7fe1a1b5220_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections