General

  • Target

    ddec93ab19fbc45eca292afdc615084a616ec4e785529a85b1681be715b8db74

  • Size

    2.1MB

  • MD5

    bef8e476d7751d3ef92be226e95062e8

  • SHA1

    bc6f91a08690bd7730995eb5f48d5d4ba571d338

  • SHA256

    ddec93ab19fbc45eca292afdc615084a616ec4e785529a85b1681be715b8db74

  • SHA512

    eb96865ccefae41f0e8c426cc556d9d9a773de79f7b49fd5653de79a48e7ae81d6a347abd34f9af7326c85f6f7d75f3426ca5ebdda2b49fd99c734a3a0484d86

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxYDPd:BemTLkNdfE0pZrwl

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ddec93ab19fbc45eca292afdc615084a616ec4e785529a85b1681be715b8db74
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections