General

  • Target

    45a1a81794775dd8d68c18db1be458ee44667b0eeb2b2109f9d85bebb8047d2a

  • Size

    2.3MB

  • MD5

    98e76086ba434247368d03446dee66dd

  • SHA1

    3e58218fc26f89b0f4ae1b705876efcd0cc26f51

  • SHA256

    45a1a81794775dd8d68c18db1be458ee44667b0eeb2b2109f9d85bebb8047d2a

  • SHA512

    1b04d4ad76673d9cd8d8f4d4a50e98f09519db841e43deee649a33ad0425d1449539d4cb672eac83334e40f81a44c42739cbc347a3cc8e632c5bb94b3cc93af6

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WA2Z:BemTLkNdfE0pZrwH

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 45a1a81794775dd8d68c18db1be458ee44667b0eeb2b2109f9d85bebb8047d2a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections