General

  • Target

    NEAS.c3e9cab7844b76276ba275ad422388f0.exe

  • Size

    1.9MB

  • MD5

    c3e9cab7844b76276ba275ad422388f0

  • SHA1

    a91c9c24b7cf84f37a2e295251d6e19a61dc1e0d

  • SHA256

    42c1a6b834e231af6233d6d298fa0bc23fa2ecf73c282e53002aa985883914e6

  • SHA512

    110c155d48bff01f9b6dae85eaf301a4444e9df3f96451e2c06ae15f4a3a5fff89f92f560c66d2755906dd0c6a82c9b73210346c59d0bcd77a5e458bb96830c9

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St16UA:BemTLkNdfE0pZrw7

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.c3e9cab7844b76276ba275ad422388f0.exe
    .exe windows:6 windows x64


    Headers

    Sections