General

  • Target

    71e2b262c5f6c9c4af80cd76bb31a9576e2775614846a3a2bf3550e98844c97c

  • Size

    2.2MB

  • MD5

    627885648d9cad990373fc3f71232932

  • SHA1

    3946447c332839c70acb331c14cfc0f4f53b6fe1

  • SHA256

    71e2b262c5f6c9c4af80cd76bb31a9576e2775614846a3a2bf3550e98844c97c

  • SHA512

    1e1db3af301cd385a428cb293990709f61c467a924ba56d7f66a426f90a45a57fce019aecd98ebf767d6cae492e33175b5123fdd36071df7aa7dfc8b9c07efa7

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljT:BemTLkNdfE0pZrwH

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 71e2b262c5f6c9c4af80cd76bb31a9576e2775614846a3a2bf3550e98844c97c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections