General

  • Target

    NEAS.cff4d94c3f3ffd6a18c6e3e4704a7900.exe

  • Size

    2.0MB

  • MD5

    cff4d94c3f3ffd6a18c6e3e4704a7900

  • SHA1

    88aa7a1ff3fb2d2f7fbe2a2e8d1f96bd89a4361a

  • SHA256

    32ad920e8dd0539b1f5e87874a6d1616ad109bdc432f462bd2e97d8eca14794b

  • SHA512

    f4cc9fcb05d62f7ddfb51e3898aa3ca78bebb273b1d9631b76afb1bee2da041c8892e52e8aea6f96edb34498cdc593b7ecd4947aa81b9c0f30580b9423dd3ea3

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St16JVFa:BemTLkNdfE0pZrws

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.cff4d94c3f3ffd6a18c6e3e4704a7900.exe
    .exe windows:6 windows x64


    Headers

    Sections