kpot | 57892087b8e11967100048da30bdff1df44f4d447f4864bda2dfedf167fad098

General

Target

57892087b8e11967100048da30bdff1df44f4d447f4864bda2dfedf167fad098
Size

2.0MB
MD5

b2647989053e8407e6d0284d145a593b
SHA1

55c19049654edbf4de2dd4537aced1619af23d1a
SHA256

57892087b8e11967100048da30bdff1df44f4d447f4864bda2dfedf167fad098
SHA512

2e87a381cb9cd574ebb1ce09a45c5d9ba7f513b4b472460cd94e189680e151aaa41d4f427451fa5475176b3a84209973f8a39a818dfc0e1eaa3a87a2e0d6ae6c
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNwF:BemTLkNdfE0pZrwB

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	UPX

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
57892087b8e11967100048da30bdff1df44f4d447f4864bda2dfedf167fad098