General

  • Target

    47ff3327c9baa7544db17b587f0c56a0_NEAS

  • Size

    2.2MB

  • MD5

    47ff3327c9baa7544db17b587f0c56a0

  • SHA1

    1e169ffbfed25b07787f3c79b57cfd2788a641e0

  • SHA256

    7904d64fceebcb5be1d9f401bb067d3eaa218b35dc6bacca8035c0cc2c1790e9

  • SHA512

    b8608c516b0c3630a4f7be7cf62de8eed19842a2f317db795f2d43dcf792f7f089dbbb24edf8a8aa57305abfd7f64a813e625a633dfdbe8faccd45bc922c0bde

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6twjVDT:BemTLkNdfE0pZrw6

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 47ff3327c9baa7544db17b587f0c56a0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections