General

  • Target

    c7bdfc5c2f6ccf21e52b1981f9544892e48bf41466a2188158896fe77110c3a6

  • Size

    1.9MB

  • MD5

    b90255810dc45dceb37761658e3efbea

  • SHA1

    b2238884147a684b44b91b6529a5584b786f9617

  • SHA256

    c7bdfc5c2f6ccf21e52b1981f9544892e48bf41466a2188158896fe77110c3a6

  • SHA512

    2ff436ebdd414b1e2b3c872956ccb4567bdd69b730edc2f58adb0cfc73a7264b8f9109ce2a6d2a1de4cc307c6aac0f6a95d8598e6546dffe9bed76bb92fda45e

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StPMNY:BemTLkNdfE0pZrws

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7bdfc5c2f6ccf21e52b1981f9544892e48bf41466a2188158896fe77110c3a6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections