General

  • Target

    69dbfdfe79bb9dc4f59fc8e390cb1f49bcc1ccb54deabb03a74cd1e395d52d1c

  • Size

    1.9MB

  • MD5

    2d583588e9b0a1c2c7985076aed990ff

  • SHA1

    e8bd930e15118d0e06469721c7d3b615fd290ca1

  • SHA256

    69dbfdfe79bb9dc4f59fc8e390cb1f49bcc1ccb54deabb03a74cd1e395d52d1c

  • SHA512

    66765617d9c0c041306458f33fe0c4cddaa96891b9416a58c82967fdf140a542b2df69024e104020f6c3ce4aacf9100d0e905c079e5fff76b7920ae32521f0fd

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3T:BemTLkNdfE0pZrw7

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69dbfdfe79bb9dc4f59fc8e390cb1f49bcc1ccb54deabb03a74cd1e395d52d1c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections