General

  • Target

    NEAS.d91e1d9b3a941423d81bd854907b4250.exe

  • Size

    1.8MB

  • MD5

    d91e1d9b3a941423d81bd854907b4250

  • SHA1

    be81bd9225072d1cc54483192bad65eb90fba330

  • SHA256

    2d9db42d673dc81e64f8d270a1d4b4f1f1d9f54f81ddceded7475295197fb180

  • SHA512

    3757a7fe936c554d5480d107400d799a2b67b30f8d0dfa2c6b22e7e0d8af8b6bcf9bcb5c0b7c2f1cddacb110bb6772abadb10715aba2987998ed8595b26bfe56

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/F3v7:BemTLkNdfE0pZrwI

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d91e1d9b3a941423d81bd854907b4250.exe
    .exe windows:6 windows x64


    Headers

    Sections