General

  • Target

    NEAS.fddb6f69d133081888ce372ac61bbdf0.exe

  • Size

    2.0MB

  • MD5

    fddb6f69d133081888ce372ac61bbdf0

  • SHA1

    ea2d9cbe39519f5afa5b8e1eab933a1aeb0abc09

  • SHA256

    b576564f6241701d548cfee011201a567f96f3aba833bec42868640ae3c5e655

  • SHA512

    6b79feb0bba5cd0ae08e11f6407f0958647d52a57f024350f1ab824e1845637b6a327b8e40a53f2cb26ec3e0fd07d68283d5ebf7d744ce27e595b41e0a1524b8

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StPM49s:BemTLkNdfE0pZrwJ

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.fddb6f69d133081888ce372ac61bbdf0.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections