General

  • Target

    a4bbee30edf63f5a032187794dcd7370N

  • Size

    1.5MB

  • MD5

    a4bbee30edf63f5a032187794dcd7370

  • SHA1

    c3476d7ba46242a3695fcd39da62bac7a51cce67

  • SHA256

    3cfff99f9caea613dfd13addf760e799eb68d457d2df84185def7100d7272d1c

  • SHA512

    55140e2bf3a5b1363e6cc73cfdd08c14946f132d4a383c0b6dd4a8b1b73fa618f06a9df3fed5338ae2d6a48a641942d179f9a08a4ac6890f5c68ab35285ff93f

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hl+dZQZBM:ROdWCCi7/raZ5aIwC+Agr6StYC9

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a4bbee30edf63f5a032187794dcd7370N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections