General

  • Target

    534a988efb87ccb84f6fa753183b735a7026b2faa0eccd5a83b048076e9cee68

  • Size

    2.2MB

  • MD5

    b9b1a9ef20ccc313859e641b9df43f6b

  • SHA1

    470c182d519774ae185ec9b5bba814ada44c74f0

  • SHA256

    534a988efb87ccb84f6fa753183b735a7026b2faa0eccd5a83b048076e9cee68

  • SHA512

    99043d22a69e7e1076a8be944eca4fcc1c3d430cd699c5962ee19cb7747197bfdab1ef8ed4e642ad12cd1c80aaf12e587e3c040d49ff57d63aff392fae511e80

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+N:BemTLkNdfE0pZrwN

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 534a988efb87ccb84f6fa753183b735a7026b2faa0eccd5a83b048076e9cee68
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections