General

  • Target

    NEAS.a727f0eab0d57c600069cb7ab396c030_JC.exe

  • Size

    1.0MB

  • MD5

    a727f0eab0d57c600069cb7ab396c030

  • SHA1

    110e9c56097b108a0b3e3ab0b3209791f4dcc751

  • SHA256

    f3bbf2f0cb3eace7ac4674bc39ddf16e1d713ad7bd3744b956336a79d93a62a9

  • SHA512

    d33afa02edff7c67b7342bce1eb809c1df89894e6f76dffed2fa13aaeee23c113c285e2f6bf143c4f8e24975c4735232b97804512bae9abbad67017c1bc35c4d

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQGCZLFdGfuv2rzQ9:ROdWCCi7/raZ5aIwC+Agr6S/F3vZ

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.a727f0eab0d57c600069cb7ab396c030_JC.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections