General

  • Target

    424e31e287dfe97c8adb936febfa2e9b9ca0b698059eddd8f6986a36aff1e2a4.exe

  • Size

    1.5MB

  • MD5

    f65a2304c1dfd5db1c0dd85dc7995d80

  • SHA1

    fe1e9242eb29881f468455378a228147b9d6c978

  • SHA256

    424e31e287dfe97c8adb936febfa2e9b9ca0b698059eddd8f6986a36aff1e2a4

  • SHA512

    b43042aab5122a2dfa100a69ea1fc21541cfcb7ee4369dcbd434751236d879b3af78b471fe19d1da4e819c5acb117b7b618e723e2db2736fe62d3d98284d30be

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hl+dZQZGGhci:ROdWCCi7/raZ5aIwC+Agr6StYCTi

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 424e31e287dfe97c8adb936febfa2e9b9ca0b698059eddd8f6986a36aff1e2a4.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections