Overview

overview

10

Static

static

10

NEAS.05659...JC.exe

windows7-x64

10

NEAS.05659...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.056591bbb0620098bcc8df16dd924a70_JC.exe

  • Size

    1.8MB

  • MD5

    056591bbb0620098bcc8df16dd924a70

  • SHA1

    053c44755a2cde83d6da4069552073e15894d4e8

  • SHA256

    1b8e9655e61d956b971a51e17ec90cba343e0fb0c38ec061ac59dd5d18e60075

  • SHA512

    bc952a3f46a3613657d2ea539cc632db4286e6a7ed28942f756eb967e05440a0a3cd5a6889bd28aa10a40cfd087240985a3854e70736545eac4049ff8198c3b3

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6Stni85Nf9V:BemTLkNdfE0pZrwA

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.056591bbb0620098bcc8df16dd924a70_JC.exe
    .exe windows:6 windows x64


    Headers

    Sections