General

  • Target

    55eaabbb16b2ba31a643f392782ea6ed3c3e41acd917155a18879076c61d6369

  • Size

    2.2MB

  • MD5

    330de6fffa43e980980f3e89f1a03cb8

  • SHA1

    2cbc2080fcc988f3c1a795e5430af4ff754b2f44

  • SHA256

    55eaabbb16b2ba31a643f392782ea6ed3c3e41acd917155a18879076c61d6369

  • SHA512

    0a34c0013bac512ceb4a2f789a09bfad4dd642b9378dd2fbe8ee6f4abb8a9fe3e50fc8b739b7d251168058aea41dbae5f7639ae1bedce34b36a353215164ae2a

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/Fppa5GePd:BemTLkNdfE0pZrw5

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 55eaabbb16b2ba31a643f392782ea6ed3c3e41acd917155a18879076c61d6369
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections