General

  • Target

    d2d48de1e559415329e99d9317ce43476da3cb160242092a81a4749cf56a6b3e

  • Size

    2.3MB

  • MD5

    36ab6897d270fc19c28a1ce58101443c

  • SHA1

    f83a393a350e6af719be50394ca137996bd35ec2

  • SHA256

    d2d48de1e559415329e99d9317ce43476da3cb160242092a81a4749cf56a6b3e

  • SHA512

    6eccb6c21686ab96ddd4768b7e696819eab1492ef63c47b015aa1a082c6cad981db8fde78fd904b40894d79dd02cc8dd6477478a57e77ce37461ba2d448ccfb5

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StYCx/:oemTLkNdfE0pZrwi

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2d48de1e559415329e99d9317ce43476da3cb160242092a81a4749cf56a6b3e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections