General

  • Target

    935cd95885bd5b56f2213952ac995595204c28c26ed89b1684fe91fa139c3558

  • Size

    2.2MB

  • MD5

    53a7821c1e4c0174d34f7a07ae4558b1

  • SHA1

    e8eb5d6519e6e63f8e3685a916625188a1775e26

  • SHA256

    935cd95885bd5b56f2213952ac995595204c28c26ed89b1684fe91fa139c3558

  • SHA512

    57a5dafe9dcbf5494d8f333323a6e68c1639bce4b031acf43a7960649e62e75a69abf2ca06dbed545916862d749bc95299f4bbacfd183e7d3b4f0a0f6801851b

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2zTySb:BemTLkNdfE0pZrw+

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 935cd95885bd5b56f2213952ac995595204c28c26ed89b1684fe91fa139c3558
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections