General

  • Target

    6e4f27f8afc09aeac132c380115d6f90_console.exe

  • Size

    1.0MB

  • MD5

    6e4f27f8afc09aeac132c380115d6f90

  • SHA1

    93525ab82460c092864ffd5c3c455e5b1fe36ee2

  • SHA256

    24917451ad3c20729a6eb659c57ce1b17eece538546377d155c18a38642438bd

  • SHA512

    a7b95296fb0fcba6d763b24d5f4b5e211f053543dbbc928f74107a7f7f69ae9635e366a6faf12c2053d85dfcead138091ea5c2d94f5fef7eb99047f60569d3f1

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQGCZLFdGm1d:ROdWCCi7/raZ5aIwC+Agr6S/Ff

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e4f27f8afc09aeac132c380115d6f90_console.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections