General

  • Target

    386521ae152b1048eaaef6761657745e09047a10f04617c821701fe30ad8fe55

  • Size

    1.9MB

  • MD5

    13537e491df674ec448196224a7dd021

  • SHA1

    eb273a63aff1e53d0302bf44cbfd0184312640d7

  • SHA256

    386521ae152b1048eaaef6761657745e09047a10f04617c821701fe30ad8fe55

  • SHA512

    f102cc4e884617aa45ff5b05749b46c71d1a8da840cd1636953ae421e1c53712dbb7bd05580975ad6f93c2d9d173b399ff4674eb8f82d9217226be87ecdd6907

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StPMVIeqq:BemTLkNdfE0pZrwF

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 386521ae152b1048eaaef6761657745e09047a10f04617c821701fe30ad8fe55
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections