General

  • Target

    c6bf4c068a8423c3a81be5ceb2ae28c24245227bbcd5edf7c0a339719dcd6a83

  • Size

    2.3MB

  • MD5

    31055f81aebfd4bca96468a01d807efd

  • SHA1

    2c69b8c0b626bab892b400d9dcdea95eef8daf7b

  • SHA256

    c6bf4c068a8423c3a81be5ceb2ae28c24245227bbcd5edf7c0a339719dcd6a83

  • SHA512

    1fb0fa260b56f62538821780bfec7c5fad10d51486569c994b436c76ea3c98450dc2b9a91edfbf3af688d3afbb8a1a1ee66fbf34638c553d5abc262a55a5fd24

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WA2M:BemTLkNdfE0pZrwy

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6bf4c068a8423c3a81be5ceb2ae28c24245227bbcd5edf7c0a339719dcd6a83
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections