General

  • Target

    937d5b5b31182e3de1fb6bc52c0c5e20820c8281c7038a8538b0a7eff476f984

  • Size

    2.2MB

  • MD5

    102ffa984479099950932ae74a258427

  • SHA1

    1f7c8bc8d72cee2f1e6b4de9593ac3f4cd812b6f

  • SHA256

    937d5b5b31182e3de1fb6bc52c0c5e20820c8281c7038a8538b0a7eff476f984

  • SHA512

    174ee832da34cd696505e19cf21f2824c1dfc2785c1e4ba28e73902148f88a0133b996384b7e11bcdaeb0c38eb9d5b51d483db0f501ad64234fe1b866e5e10e5

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxYaezLk:BemTLkNdfE0pZrwc

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 937d5b5b31182e3de1fb6bc52c0c5e20820c8281c7038a8538b0a7eff476f984
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections