General

  • Target

    765bdcd1384422ff839ed590a1204fe4f271b24286ed6b2d3bb5666e5d55ee5d

  • Size

    1.4MB

  • MD5

    a8ae7257c87b209d640c29fabd76db90

  • SHA1

    bc400b8ede06f74df8ae66afe8dd296a686d6fcb

  • SHA256

    765bdcd1384422ff839ed590a1204fe4f271b24286ed6b2d3bb5666e5d55ee5d

  • SHA512

    0831410b733b411385182f7bbb3316a6d35a5d888e48ddcef017e2473c8a9d011c9190c114d3019f325e8877be5f16a13073495610e5fb59c18de77ef87fb4f6

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+HPdy:ROdWCCi7/raZ5aIwC+Agr6SNasrvE

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 765bdcd1384422ff839ed590a1204fe4f271b24286ed6b2d3bb5666e5d55ee5d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections