General

  • Target

    NEAS.538f1ce7357e3b4fd3e9e37805bf69a0.exe

  • Size

    1.9MB

  • MD5

    538f1ce7357e3b4fd3e9e37805bf69a0

  • SHA1

    837ea13c26b9a73442ee2457ca1c555ff5deea8b

  • SHA256

    add308d2c58406bcf81686f184943c0d36e29c8f3383a4c2815548958c3f655d

  • SHA512

    4edc8725dc4eeb48e24d9c9d4a78a789e7047519dff63c9dac08365e349b392374c13e153e8d4b8ba7f47a3597c21783509f103d0a892c4427246fbf7fec5172

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St16Yt:BemTLkNdfE0pZrwe

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.538f1ce7357e3b4fd3e9e37805bf69a0.exe
    .exe windows:6 windows x64


    Headers

    Sections