Overview

overview

10

Static

static

10

bb440c58f5...AS.exe

windows7-x64

10

bb440c58f5...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb440c58f5bda16ba4c687313fd8dd80_NEAS

  • Size

    2.1MB

  • MD5

    bb440c58f5bda16ba4c687313fd8dd80

  • SHA1

    e2c2c029915c8ff8ef8392d48555355bd6f3aa09

  • SHA256

    0881b22c820f65f35fd57ea3442fc50454d69bd37bae5d59a5128b63257240d6

  • SHA512

    46f2e30d36486304b8ab9c5932cd3cfe9f103887346851266cd80d4b1d58ee80d706712adcf2f9d638375a56644a637a571fdbafd6df544835ac5575131aaa19

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxYj+ITWSMgO:BemTLkNdfE0pZrwA

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb440c58f5bda16ba4c687313fd8dd80_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections