Overview

overview

10

Static

static

10

2ed415d4d7...59.exe

windows7-x64

10

2ed415d4d7...59.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ed415d4d776a24f04662a3f2fd72de8d3fc4f0cc2c3e59dab78ff6b4f320759

  • Size

    1.2MB

  • MD5

    14a846c0299d1131b0941b4d2ecdbb03

  • SHA1

    dd64e411dcde1e7f75713e37b7cdbed259a7e09a

  • SHA256

    2ed415d4d776a24f04662a3f2fd72de8d3fc4f0cc2c3e59dab78ff6b4f320759

  • SHA512

    4241e8364f1e751e9ac08e8df927d881a44e3b10c8c5845f58b5c8ed6f7b509256714a03e831d9bfacdf28888f4642a4acf8e1471acc62484f48828bc3047777

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUkhn:ROdWCCi7/raZ5aIwC+Agr6SNw

Score
10/10
upxminerkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ed415d4d776a24f04662a3f2fd72de8d3fc4f0cc2c3e59dab78ff6b4f320759
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections