Overview

overview

10

Static

static

10

NEAS.03209...JC.exe

windows7-x64

10

NEAS.03209...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0320939194b39f4862009c810e742220_JC.exe

  • Size

    1.9MB

  • MD5

    0320939194b39f4862009c810e742220

  • SHA1

    b96d4ababecba965c199ef1b255f4fbd6b9e0ab4

  • SHA256

    1581c1e8540355cd785e77e0699f4e9e24bb83252e30652b6279551b7f26f050

  • SHA512

    fb3206c463d9499b8ee28e566312fe4d0c46d0a825160310a267f21caea97ea4437e724f99416a211583b0ecdb4f6465261cd8c3ec62e47108eeb1ce29ad584a

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St16JW:BemTLkNdfE0pZrw4

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.0320939194b39f4862009c810e742220_JC.exe
    .exe windows:6 windows x64


    Headers

    Sections