Overview

overview

10

Static

static

10

7e9d5a8dbd...eb.exe

windows7-x64

10

7e9d5a8dbd...eb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e9d5a8dbd45e9bf9221062121acbd83a8296bf9c43319aefa05f6efe2615feb

  • Size

    1.4MB

  • MD5

    1694309aed76d32583c10978af07bb29

  • SHA1

    2537a5015b22763862599b52b61ed8d88d255710

  • SHA256

    7e9d5a8dbd45e9bf9221062121acbd83a8296bf9c43319aefa05f6efe2615feb

  • SHA512

    e8c85139cb6e7a99ca2696d4ec977cc8c093053f4a58b811207128d2f86ef16a3775b289020e3eac28e777bd3cb916210059141190cbbafcc07c5c6d0a718898

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQt+4En+bcMAOFZCRNnczM+Xc4M:ROdWCCi7/raZ5aIwC+Agr6StVEnmcKOl

Score
10/10
upxminerkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e9d5a8dbd45e9bf9221062121acbd83a8296bf9c43319aefa05f6efe2615feb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections