General

  • Target

    4d97c13d1cab36b7aee3798f22ba4821521219585243f2893c96df0f8c3ba819

  • Size

    2.1MB

  • MD5

    bdaa48ee3f38591750951c511ffaa9d6

  • SHA1

    07fff5053f5497219fb7c5f60522bfef9d1ccb82

  • SHA256

    4d97c13d1cab36b7aee3798f22ba4821521219585243f2893c96df0f8c3ba819

  • SHA512

    58cf23c5ff7849c5850ae24f7286536b4b1e495f1d3b7207a77fdd6450c233c27d578727a3fbc744021d78ce84176c4b2066ff5e395f4ba031e81b1636bfed23

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNasrsFCrdk:oemTLkNdfE0pZrwd

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d97c13d1cab36b7aee3798f22ba4821521219585243f2893c96df0f8c3ba819
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections