General

  • Target

    NEAS.1b91e3fdec6d128f13e21b4ab61929c0_JC.exe

  • Size

    998KB

  • MD5

    1b91e3fdec6d128f13e21b4ab61929c0

  • SHA1

    1d8a2b9845aeb62e2d85a4be2bbfa996e7a0f116

  • SHA256

    7a85dd65a1f6195d2147636f687b72f3d1fb1538ed0339a9d6cd9d757ac1ba95

  • SHA512

    b0f821198fa87907d21e4e60bcd5c86973991bf2019971e8709c433649ea897e5e0321bf3a31b3133694c8675d65bb196057f7477340a6f1d80ac9ba9f7965fd

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQGCZLFdGm1C:ROdWCCi7/raZ5aIwC+Agr6S/FY

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.1b91e3fdec6d128f13e21b4ab61929c0_JC.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections