General

  • Target

    003591e684a92a9bac8b3d1dcddf26e0_NEAS

  • Size

    2.4MB

  • MD5

    003591e684a92a9bac8b3d1dcddf26e0

  • SHA1

    cbbd50c6fe649d5de561977cfb935fb9a20d2eca

  • SHA256

    c289a895c4809df58ca5a71a03633e0b51f8c9dc621eadba6f65075409c8aa12

  • SHA512

    69247762493f6f698962ff32a99fbc8517b33f1f872850195ce7f2ec7ec6db62a97bf603f22e1fd47db141e1ab2d1a209f2112bb85bd68a8197a767f17cf0679

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqq+jCpLPQ6:BemTLkNdfE0pZrwl

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 003591e684a92a9bac8b3d1dcddf26e0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections