Overview

overview

10

Static

static

10

NEAS.2979f...50.exe

windows7-x64

10

NEAS.2979f...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.2979fedcf3c87ff4d070e9b6dd8cf250.exe

  • Size

    1.9MB

  • MD5

    2979fedcf3c87ff4d070e9b6dd8cf250

  • SHA1

    e5f244c5a1dda0aa2477eb475f0deb4503dc70da

  • SHA256

    8fe1bd1dc7f21b31dfe3526c1c2a4e8d298db92543d419d3cc4cf458b0d8ae13

  • SHA512

    76c6e670cc33ffc3e2ac32114b23b5fa53419b950719923187eb8f42ab748605e82ff5265623baab8b399e94faa6934af5b59079ee4190a9d55758219f8293f1

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StniTeoApuIiyi:BemTLkNdfE0pZrw3

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2979fedcf3c87ff4d070e9b6dd8cf250.exe
    .exe windows:6 windows x64


    Headers

    Sections