General

  • Target

    27088630b9647257987e0584610675f66b1a570a0b018ce315a95872fb9303da

  • Size

    1.9MB

  • MD5

    0ce592b8c2fe6b0c32ce1f9f9efdb198

  • SHA1

    63cab9d5aca87f6ea97030c67d74cb7a294a8b22

  • SHA256

    27088630b9647257987e0584610675f66b1a570a0b018ce315a95872fb9303da

  • SHA512

    54940e321fcecd90523cf55731216ff72ac25eeb3b798e3097ea47f0ab7b2b377172d123066563e074a0729fe73b9655941e810825bda18b917d0d9a528f251c

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEn0ks7:BemTLkNdfE0pZrwA

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27088630b9647257987e0584610675f66b1a570a0b018ce315a95872fb9303da
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections