General

  • Target

    20369499bb0f5c4934e4a2107bf0b43e3d79b62fc2341f45c3a79c38181060c1

  • Size

    2.3MB

  • MD5

    abfd8fa39cb79c45519a4b2f42d4a033

  • SHA1

    7d747083f1802b6d7703a0b98b2697832f37e0fa

  • SHA256

    20369499bb0f5c4934e4a2107bf0b43e3d79b62fc2341f45c3a79c38181060c1

  • SHA512

    3b34806d51aa3d8f363b1c2d563eb6e34a96df6bb6bef80737b5122d12d0ace6c07dfa2814f66acc33b24e4d22d89fdcc87038bcf33ff2381d0e18a092bf6327

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxYj+ITWSMgCqOw:BemTLkNdfE0pZrwJ

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20369499bb0f5c4934e4a2107bf0b43e3d79b62fc2341f45c3a79c38181060c1
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections