Overview

overview

10

Static

static

10

NEAS.f81ad...JC.exe

windows7-x64

10

NEAS.f81ad...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f81ad01db83210309a08852ac1a6af00_JC.exe

  • Size

    1.0MB

  • MD5

    f81ad01db83210309a08852ac1a6af00

  • SHA1

    60dc68d0170228b6b48af3f08c0ac38e582044d4

  • SHA256

    578985675a39270e155d86a3ed4a1824cec706efab37be2f585d52d6c2e85763

  • SHA512

    58cd6a00e6d8aaa54c53bdb7f078897beb5fa972daddcb872b0bb43f9f29ebbb5eabb102cb6582770e93a167c5d319c95ba4bd446c040e8f5c24e4b148e99696

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQGCZLFdGfuv2rtuQ:ROdWCCi7/raZ5aIwC+Agr6S/F3vQuQ

Score
10/10
upxminerkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f81ad01db83210309a08852ac1a6af00_JC.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections