General

  • Target

    3e246cc5ed8acca2759af0ae95f2af80.bin

  • Size

    2.3MB

  • MD5

    3e246cc5ed8acca2759af0ae95f2af80

  • SHA1

    1056aa88b0ab6652766e53c36434910c41142128

  • SHA256

    ae2e9f0fe5e3d0bc7d00be59b19df2c1f18ebcb36ac9d1102db96b1caa8a1c67

  • SHA512

    ca3aef78d0a52916f7ed2320a3cc769dc6627ad6de8c5acc4b543f0f32ec2586e23dd61fa1a80a8af8638f76b6b8aba657a2c54cde87bce182e366ecb3989c3e

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81p1vsrNio0m/E:BemTLkNdfE0pZrw/

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e246cc5ed8acca2759af0ae95f2af80.bin
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections