General

  • Target

    NEAS.11e29bb5bfb4a3ba8c42bf5eb63c05e0_JC.exe

  • Size

    1.8MB

  • MD5

    11e29bb5bfb4a3ba8c42bf5eb63c05e0

  • SHA1

    f15391034bdbc7ae3c04328472ac5eec88e0a94d

  • SHA256

    31f408ec1e0acc4e09e994ca4c2fe95daa34576d9a21e6bd11ae0f762250b52d

  • SHA512

    412cf366f5b340de8573c2c50a6eb4c08af6ece360e917a969c93d8460c6d28f752c854c197cdef8a78e8c30ea221c4e5d9a03b637e0674ca16ed65939d3faf3

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/F3vJM:BemTLkNdfE0pZrwP

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.11e29bb5bfb4a3ba8c42bf5eb63c05e0_JC.exe
    .exe windows:6 windows x64


    Headers

    Sections