General

  • Target

    7464742dd3b9406f3e0ef81165313a8e6f2db0b911991867e8202024ea3e42cd

  • Size

    1012KB

  • MD5

    d89288b199fa1d0cd8e52259b87e4173

  • SHA1

    5b813c10dbacc715e39746f62b665ff122cd355b

  • SHA256

    7464742dd3b9406f3e0ef81165313a8e6f2db0b911991867e8202024ea3e42cd

  • SHA512

    e14b9de08ab182a1cec069c4b959d037b68f9a57b8b5f8f8e2e1d8d06ff489f7438b1617638d3754b6c422414169f3ec426599bce18a5bab4444ebbbb698d045

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQt4U0Zc:ROdWCCi7/raZ5aIwC+Agr6StB

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7464742dd3b9406f3e0ef81165313a8e6f2db0b911991867e8202024ea3e42cd
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections