General

  • Target

    3dc637aa0e564bff6c98b678bfb38e60.bin

  • Size

    2.3MB

  • MD5

    3dc637aa0e564bff6c98b678bfb38e60

  • SHA1

    99040c6de07673a3582e905bf5c9c4284bb43c1a

  • SHA256

    fbf9ea273f5c10634927b32200e6560a0c8e1ab0d06dcdb8f713f706fc28e87b

  • SHA512

    8cd238bc7d6de0ecf4dbee8addf005a12a2ac8336c0031062dfaec5467d1315d9281b0ced63bb773da52df5a4e47032728bb85f969bfd8a7f2547a5377ae33d7

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxYDvZThTL:BemTLkNdfE0pZrwH

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3dc637aa0e564bff6c98b678bfb38e60.bin
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections