General

  • Target

    NEAS.e1417111ac982c17f923e189f298eaf0.exe

  • Size

    1.2MB

  • MD5

    e1417111ac982c17f923e189f298eaf0

  • SHA1

    1cac4cdfc9b227894f3c34d8faaad64d2a31be1c

  • SHA256

    25e0d93175eb5e6cac25042af81c581ea1a48937358d4d25831e5a8b676b66b4

  • SHA512

    e59432901da3f7a23a778ac5b281dcba044784d371c8aa97cd4af4852443ed2b06c9e0ded2e7d2a944ae888c371a018a60f875d462b8138024acf3f26f4c220b

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQt4qifyPHd02XFA:ROdWCCi7/raZ5aIwC+Agr6Stni8G

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.e1417111ac982c17f923e189f298eaf0.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections