General

  • Target

    da542fa85d578f453c9a0b2df94f59e1596a4d1ee3574d86b0b7f6e45d6d94af

  • Size

    2.2MB

  • MD5

    baedf29df10278bd0998eaaf2935a663

  • SHA1

    2fabb8095e5f25406821f91cc2df9708c2206e57

  • SHA256

    da542fa85d578f453c9a0b2df94f59e1596a4d1ee3574d86b0b7f6e45d6d94af

  • SHA512

    24f6ec0f1df953ccc23ed79e4b8677e0d69fa937fbf609f6d526e6fde7099be40acd631a3f4753208d9f4e9ee62ca8804d03ce59178c8318e5a39268d62b5625

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/Fppa5GV:BemTLkNdfE0pZrwu

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da542fa85d578f453c9a0b2df94f59e1596a4d1ee3574d86b0b7f6e45d6d94af
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections