General

  • Target

    59d83a53c7950e20fe0203d1419187776ba3b0d1c954a11172ae9686504b3969

  • Size

    2.3MB

  • MD5

    12c2aaa4aa253f39bd7d878fd3399760

  • SHA1

    11d534455166bc39665de2315ac248899ef55699

  • SHA256

    59d83a53c7950e20fe0203d1419187776ba3b0d1c954a11172ae9686504b3969

  • SHA512

    6412a542cdc6bb2f03d5bb360bfecb91f8c32577837ee1df36936cb24e5547922f46365f1af1474eb1924a2657d8482413b714cc696731c1c6d4e3dee15335eb

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxYj+ITWSMgCqf:BemTLkNdfE0pZrwp

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 59d83a53c7950e20fe0203d1419187776ba3b0d1c954a11172ae9686504b3969
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections