General

  • Target

    ec2f0b68d966490cc290e522d2b1a59ebe4854b1ade451b5bbe5e2057a440800

  • Size

    2.2MB

  • MD5

    a2e6cdcaabca2131e568a30b667e1af0

  • SHA1

    1b119cb58c30e1a61fdd90f516a9422e7d7fc791

  • SHA256

    ec2f0b68d966490cc290e522d2b1a59ebe4854b1ade451b5bbe5e2057a440800

  • SHA512

    8cd0a8b03a4b2eb7c304626a9c097031cf016b07823d7bea335c4fb14a8c7fb47413c111ede88d96207e242f1875de5972f067af354835e801c9ae342332838e

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SqCPGvTm:BemTLkNdfE0pZrwW

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ec2f0b68d966490cc290e522d2b1a59ebe4854b1ade451b5bbe5e2057a440800
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections