General

  • Target

    c86618d01d94841ee6ee67f767ba311b89f3436ffa685579022b33215fd15ef8

  • Size

    2.0MB

  • MD5

    99f9e33a51f4d29cd2f51eeab259d986

  • SHA1

    3138eb94e39fd3392a0e0c7b65df912d3b81544e

  • SHA256

    c86618d01d94841ee6ee67f767ba311b89f3436ffa685579022b33215fd15ef8

  • SHA512

    f201372f74440d8c1f0068eb2b07c9254c2059fe106352ec44890f44989a8fbdc40856771df1e1ccbbf7b17067b6c192564de156f1422b976852175ccc1e0e43

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3L:BemTLkNdfE0pZrwD

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c86618d01d94841ee6ee67f767ba311b89f3436ffa685579022b33215fd15ef8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections