General

  • Target

    9c4d644b52c75f2c779ebe1c9f2f0a70N.exe

  • Size

    1.0MB

  • MD5

    9c4d644b52c75f2c779ebe1c9f2f0a70

  • SHA1

    5cfdb3b3d9f7d565b08273fdd7b4360f5beff18c

  • SHA256

    3992780b2871ee9694637c120bd39275b9fe6a4a9f73a215d29f85bd32d535a9

  • SHA512

    9043c9ab5b36057a9bdf12d00c6ac13d3e7687b1fc4bc87d914dd6f75736fb50bcf3ae9207b9801808ad6a0258cc6276323197a1d96b59608c9bf1804a457b3e

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQt4RiWgtCvr1PP:ROdWCCi7/raZ5aIwC+Agr6StKIa1X

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c4d644b52c75f2c779ebe1c9f2f0a70N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections