General

  • Target

    f754b9c068a9c8ca34f1f1a2ac5d948ee63c617a106cfbd3d8be4eb2f330ac2e

  • Size

    2.2MB

  • MD5

    525978179a5738cb0bc205554bf747b5

  • SHA1

    4d50d1282342d544b37d6bdd980d4dcf5c04ff75

  • SHA256

    f754b9c068a9c8ca34f1f1a2ac5d948ee63c617a106cfbd3d8be4eb2f330ac2e

  • SHA512

    1b88bf27b6b561bd403ddd42d3d119bff1b5ab2194e25c4ee6a2461f9df38c8ebaacfbe0e44b4015e08a7fd66c9fbb2e31b4e51f7c9d0815cc3f6d7e95ccfca1

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3iXkc:BemTLkNdfE0pZrwi

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f754b9c068a9c8ca34f1f1a2ac5d948ee63c617a106cfbd3d8be4eb2f330ac2e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections