General

  • Target

    NEAS.396007e071e7c6fa0e8919c6c21e9e60.exe

  • Size

    1.9MB

  • MD5

    396007e071e7c6fa0e8919c6c21e9e60

  • SHA1

    b70a0e2a720c19870ce2d7fad1f70343d167450a

  • SHA256

    9edbff8bf50373a4007f68a4593c9be8628b451fcaa310b628b310ac61f682b1

  • SHA512

    c422117b765a09cef911f81fd3bde16b3cd743134a052820fd3d7db8d9917017040296107b88586bbc3e3ff0c788cfb4224229ca3100f1969091f3be6595bedc

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOq3m8:BemTLkNdfE0pZrwk

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.396007e071e7c6fa0e8919c6c21e9e60.exe
    .exe windows:6 windows x64


    Headers

    Sections