Overview

overview

10

Static

static

10

NEAS.42e90...50.exe

windows7-x64

10

NEAS.42e90...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.42e90f479dba472e7bd5c79aaddcf550.exe

  • Size

    1.9MB

  • MD5

    42e90f479dba472e7bd5c79aaddcf550

  • SHA1

    3332d49b48869b9cbc4d4892fd7867682fe69fac

  • SHA256

    780702d5a1e24bff28b833d0faa8810cf72a8c67f7a1ef1f67d1ac5451c69433

  • SHA512

    faef31c317243ba3707dfe94a9f0899ce2ca5d2f5d4483f7143b1eba4df1d0cc0df3720cb7fe7e9d1d04185ee0bdddc2291513811dea27cc127ee749bf686917

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St17nE:BemTLkNdfE0pZrwp

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.42e90f479dba472e7bd5c79aaddcf550.exe
    .exe windows:6 windows x64


    Headers

    Sections