General

  • Target

    b9f4cd0fd9202665a83795deb4975d65e8ada10071074414714633cf2058818d.exe

  • Size

    2.1MB

  • MD5

    d4df9af713e6eb0b6d04fd80cddd0f90

  • SHA1

    d1e45edc7fcd186a68f1bca0a76a3e6c5ad8a3ef

  • SHA256

    b9f4cd0fd9202665a83795deb4975d65e8ada10071074414714633cf2058818d

  • SHA512

    b6630ef019150c1cfdd3961cbc60f78eb07a11d16da6b1ac2abc063190683432cbaf7fc4594628fdfc9f808c9ff004c9448d4a6f13109c2bddf732e7fc931901

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2zTyE:BemTLkNdfE0pZrwu

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9f4cd0fd9202665a83795deb4975d65e8ada10071074414714633cf2058818d.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections