kpot | cc4d30448ea8b3f644e02e8172fe5dd19d177f9cb7753dcb3a2f834d22bf73cd

Sharing

Target

cc4d30448ea8b3f644e02e8172fe5dd19d177f9cb7753dcb3a2f834d22bf73cd
Size

1.9MB
MD5

986151e59e6905cb3ed0afbd12628f52
SHA1

aca8bacc8d331212450c5cdfabbae74490ab9e8f
SHA256

cc4d30448ea8b3f644e02e8172fe5dd19d177f9cb7753dcb3a2f834d22bf73cd
SHA512

891642c967d5c07bc19774a4c1f7522ac5a98ea17e9df07aa2942182614b80e86f839335ef6f4181c70331e3597d43785f6d729a2dbbc33151adda7c71b523cd
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnSeR:BemTLkNdfE0pZrw1

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

resource	yara_rule
sample	family_kpot

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc4d30448ea8b3f644e02e8172fe5dd19d177f9cb7753dcb3a2f834d22bf73cd