General

  • Target

    6980825337657fedc557e92d183881c0.bin

  • Size

    2.3MB

  • MD5

    6980825337657fedc557e92d183881c0

  • SHA1

    722537aac1d2042ec5fe5955f0a999da55d4ae52

  • SHA256

    1b641b9b5bb86e28681ae1b5db900e3c6042c98a03e84ffae7acfe6c243a286a

  • SHA512

    25d5d704945cb597782db14e775a1ebac3433b31c9ca278d72095ed0a5bac12c1ae5f1a920f709624cac8de338098149baccf2133d62e5023e124211ea300d16

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljk:BemTLkNdfE0pZrwY

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6980825337657fedc557e92d183881c0.bin
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections