General

  • Target

    f284b19cfa9bc808ab713793b516b30f03183d36284a5a93213578d6f03111b5

  • Size

    2.4MB

  • MD5

    23c9b44a3212ecbdf8bac21ab8e872da

  • SHA1

    77271430b8c507d30c6555eb0b0cf9e4e7a5ba46

  • SHA256

    f284b19cfa9bc808ab713793b516b30f03183d36284a5a93213578d6f03111b5

  • SHA512

    8c2d4791c2aa626d62292e91aba3c641a29d9f76745547ceb0f66493e3c90c9692ef90ffa4890705e46b2c17569d66668c1a7965bc517beca4f3ab3724111e4f

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eodbR:BemTLkNdfE0pZrwR

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f284b19cfa9bc808ab713793b516b30f03183d36284a5a93213578d6f03111b5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections