kpot | 5613b4538749a676ce0966ee8df500e4b82f0b458c3b93837dc3c146281c9b68

General

Target

5613b4538749a676ce0966ee8df500e4b82f0b458c3b93837dc3c146281c9b68
Size

2.1MB
MD5

42b86e836fb945e91034dac4694d2bae
SHA1

eda36c8c006aebec5159bc740c08380bb5558d47
SHA256

5613b4538749a676ce0966ee8df500e4b82f0b458c3b93837dc3c146281c9b68
SHA512

f4e7a79e342a7bad5c355f421c8b3de0a67f974ec549a247e25bc5e6d1978b0255965c02ca2e06b74d99d39fa9baf80c6f42304e9af90159a6d05976a611b528
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6twjVBs:BemTLkNdfE0pZrw/

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	UPX

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5613b4538749a676ce0966ee8df500e4b82f0b458c3b93837dc3c146281c9b68