General

  • Target

    8705f8295e38c035d681cd9317acc8044a622455b172a8b7520fa2125b80377b

  • Size

    1.9MB

  • MD5

    43a28dceaab505d4a8803487bb3d1a31

  • SHA1

    53f23ac89b9a2864fcde6c4e19a4ca5e8fd9ae68

  • SHA256

    8705f8295e38c035d681cd9317acc8044a622455b172a8b7520fa2125b80377b

  • SHA512

    1fa7e286d1c047e011cd74f96f03ab30793b3feb0241870a75ad363b7c061915cd4147000b54879c46aab7b518d8a95f4abe747bb364c9f81ad611a18f3b6c83

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnSfaH:BemTLkNdfE0pZrwD

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8705f8295e38c035d681cd9317acc8044a622455b172a8b7520fa2125b80377b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections