General

  • Target

    NEAS.da7f35c4dbd5f7fb4b6064933a3fab40.exe

  • Size

    2.0MB

  • MD5

    da7f35c4dbd5f7fb4b6064933a3fab40

  • SHA1

    14b258c0a0631301b781ffdcafcb4d3a8ffab691

  • SHA256

    9427071220f6d944003c337d7c2d35c8c9b930122ddd16d7d12f39b2738f16fe

  • SHA512

    f52ab212be656761c5edfa9226b4ef2c0c6d542dc821faf2201b58bd15f5f6df4a1a0f7781c28ccb35e4cc94aea094d82c5903478fa0f77b0b3ad898ef082285

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StPMVIejV:BemTLkNdfE0pZrwr

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.da7f35c4dbd5f7fb4b6064933a3fab40.exe
    .exe windows:6 windows x64


    Headers

    Sections