General

  • Target

    ceb5e94816e6d24a6a45e682b7f5a82f55263e907eb11e5d4c6c9a243d2e9790

  • Size

    1.8MB

  • MD5

    02d8e044ccc3d478e56883b943443f90

  • SHA1

    36314ca5a57cff12e15e56eec4fb0720e603c257

  • SHA256

    ceb5e94816e6d24a6a45e682b7f5a82f55263e907eb11e5d4c6c9a243d2e9790

  • SHA512

    8557927d9b9e10512b24ee90f1af35ffc5550729dd5e7bb9ab053070285ec3ed072544e69e7476afe5f1ba0a6d4050678db3c95a718b0a6308b5efee4af05971

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6Stnt:BemTLkNdfE0pZrwS

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ceb5e94816e6d24a6a45e682b7f5a82f55263e907eb11e5d4c6c9a243d2e9790
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections