Overview

overview

10

Static

static

10

44d5c01a68...AS.exe

windows7-x64

10

44d5c01a68...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    44d5c01a6828c349b237e57a4001fa50_NEAS

  • Size

    2.2MB

  • MD5

    44d5c01a6828c349b237e57a4001fa50

  • SHA1

    7f281f151fafe733491d212061b6a4b3632da564

  • SHA256

    e7939a196c1f4ccbfad2fdfea564f2b39ac24610817a8e517f5b0281d81295cb

  • SHA512

    a8a0eac0e0eeae4cbabd997d2de9af54bbbc91b6a1acb7d54ec4d7ee049383791e67b067ea6b2fd80f5503ea1ad0b9f07d2125404868a78b14483d7bf3757d66

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6twjVDi:BemTLkNdfE0pZrwb

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44d5c01a6828c349b237e57a4001fa50_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections