General

  • Target

    7a6b9512cb093ec9668693fcd81b2568a9997f0c6db8a641c200c9af0342d92f

  • Size

    1.9MB

  • MD5

    dd1915922542a6344eabc1bf99657a06

  • SHA1

    017878fd75323f97244b606ec2532af1c687e581

  • SHA256

    7a6b9512cb093ec9668693fcd81b2568a9997f0c6db8a641c200c9af0342d92f

  • SHA512

    fd18bc0efe27718eacdd79e167913ee210d264981c210c8f1dd80729777eaa413b60bba176205d86a57d8c4e9b0778cc77d92cb2422d159527fc445b9f40f37b

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3ONRc:BemTLkNdfE0pZrw9

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7a6b9512cb093ec9668693fcd81b2568a9997f0c6db8a641c200c9af0342d92f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections