General

  • Target

    NEAS.cad5e6836c6a7e1ac07052cdf2e38e60.exe

  • Size

    1.2MB

  • MD5

    cad5e6836c6a7e1ac07052cdf2e38e60

  • SHA1

    35f548f96da4481555892fdfa84d55f6e7a74cd4

  • SHA256

    2e8c50888389c5b66018ba7dd6024e9a478a8f9b2d19b94f7f7242e2a7f9ba69

  • SHA512

    ea7d2ca7abd885334f9cbd1f667e6bb3e170c9c393993ac3775d432f7be652f09ab563f0cd150a6a4b1697ec740fb32ff939cb1514a73592bd4b38d34aca3221

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtpj/Yz6XVSvmHaZHS6:ROdWCCi7/raZ5aIwC+Agr6St1lOqq7

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.cad5e6836c6a7e1ac07052cdf2e38e60.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections