General

  • Target

    NEAS.0078f63b273f241fa48e20d90f083060_JC.exe

  • Size

    1.9MB

  • MD5

    0078f63b273f241fa48e20d90f083060

  • SHA1

    37f049ddeb79c766cf6ade9312d9a946a783e4ab

  • SHA256

    b18d141c22aa7fa7da48a8953f8c53db4e6eb44fef9eb01305ebb728b75f75f9

  • SHA512

    86b360abb469e4a03ba655b75d8822bb1a0c0152e57379683d2cf1ade2e554f82ba446d4c5fe1d86188963ab98e62b6fbe45e129370835b86bcc13e409d4ca35

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St164L:BemTLkNdfE0pZrwo

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.0078f63b273f241fa48e20d90f083060_JC.exe
    .exe windows:6 windows x64


    Headers

    Sections