General

  • Target

    167ac0f826f168b387ba15b26279e52e009e63432c17359ff88b8a443289722a.exe

  • Size

    2.4MB

  • MD5

    4ebfe292690c9f6cec2c8ad4d8c01e60

  • SHA1

    f1ee653e74de301a002623dbb2ffe7e4fcac87cd

  • SHA256

    167ac0f826f168b387ba15b26279e52e009e63432c17359ff88b8a443289722a

  • SHA512

    1d6e2d56c1ec6e35f43da8b1a34617454a4bc6d637dabe79a36dec8e7dababe3b0e97f959b4b39d03536205752ec2f3ab1d173faf777ba978bc6e3b69543d67d

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StYaYFWWaKzYmB:oemTLkNdfE0pZrwv

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 167ac0f826f168b387ba15b26279e52e009e63432c17359ff88b8a443289722a.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections