General

  • Target

    c5f11664766c5ac960f2d0aa5329a836520598dfc694882c94864bd403c56f84

  • Size

    2.2MB

  • MD5

    7205e2aecbdd4fba9cfa380f6a145458

  • SHA1

    75ee594b2751547da3215b2a4cf762ee50451434

  • SHA256

    c5f11664766c5ac960f2d0aa5329a836520598dfc694882c94864bd403c56f84

  • SHA512

    45a333c8d0105ffe095f71db4a6156be9a73b92395af2f08293651e46af3128871b3e1ecbecbbde20bd7f71d17bf4c63681b490d44db272d91981c304a3f113f

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/Fppa5GePM:BemTLkNdfE0pZrwg

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5f11664766c5ac960f2d0aa5329a836520598dfc694882c94864bd403c56f84
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections