General

  • Target

    NEAS.3880b417a2237773bf567766f147d200.exe

  • Size

    1.9MB

  • MD5

    3880b417a2237773bf567766f147d200

  • SHA1

    17e235a4ce16d53d5277f39878154d05e5763938

  • SHA256

    297f2a166c3a32b2e4b940a9ced1718c21b5c53583399ee3830a9ef9b70b2c31

  • SHA512

    1c83dda503ccb9d063c1549d753b715f8e2e340da823bba266a131f444b67e625b22ee8c380f027c337898597191e0ceedf141486123a582eeafb529dfa6bd8f

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6Stni8cB:BemTLkNdfE0pZrwV

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.3880b417a2237773bf567766f147d200.exe
    .exe windows:6 windows x64


    Headers

    Sections