General

  • Target

    f9b20643af9c2af31cdb584d5aa7ada4c33d187e4e8b2a4ab6df45d949cb7892

  • Size

    2.2MB

  • MD5

    c836fe0bf4217a99e75662642f799dc9

  • SHA1

    ec46b8bd379213a535e2dae5acdc55d6bebc8716

  • SHA256

    f9b20643af9c2af31cdb584d5aa7ada4c33d187e4e8b2a4ab6df45d949cb7892

  • SHA512

    64b22bd0dc0e3fe67f8c57f25f406a0af23094c88ed4607ec0b6faa2d3b9bd27142cfd63f180ac093e38b075f16e4b176f2814088d126251fbcb80e30bd81267

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2IAk:BemTLkNdfE0pZrwR

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f9b20643af9c2af31cdb584d5aa7ada4c33d187e4e8b2a4ab6df45d949cb7892
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections