General

  • Target

    245ce4f5036f598eedaf714a709d1378d949137ce0a07a3ac6ae9f6133798049

  • Size

    2.3MB

  • MD5

    1720334b55d4bbbb5352af5040a4fc88

  • SHA1

    3e45c8a25e78d1fd5dac9c9dd30b1f0f5fd5ed81

  • SHA256

    245ce4f5036f598eedaf714a709d1378d949137ce0a07a3ac6ae9f6133798049

  • SHA512

    1357341a6186ea09ea53c4253ee464ea1bacfecff3beb709626a00470acc52dab7e3380bad7ecfb9465844b48158f9e89f41ef90ebc219d0d087fe14898f3398

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6twjVDI:BemTLkNdfE0pZrw9

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 245ce4f5036f598eedaf714a709d1378d949137ce0a07a3ac6ae9f6133798049
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections