General

  • Target

    56c76e31f0d69daa9f624729a4398560.bin

  • Size

    2.0MB

  • MD5

    56c76e31f0d69daa9f624729a4398560

  • SHA1

    dc8b238172cd5983f286fc093e22ae6fe5ef92be

  • SHA256

    599941131ffdfc7a9f2f532e825ea05cf656f5a6033804d3fe8965c759e7bb44

  • SHA512

    285f0ff001cdecfeefa7062a7e9f747a8bd86f41b5502b9eef03f45df1cb04de1486981fa2cd1f6d7bc0888476ba60a64b1fc05af6a54a09382094a95679dd10

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3i7:BemTLkNdfE0pZrwY

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56c76e31f0d69daa9f624729a4398560.bin
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections