General

  • Target

    c5037bd17597d5e22baaf7c5d2b0a5f0N.exe

  • Size

    1.9MB

  • MD5

    c5037bd17597d5e22baaf7c5d2b0a5f0

  • SHA1

    f92672331004c1a7d41477a91e9eb222966d90c7

  • SHA256

    66793370e0bb7ddfdb2ba8550a6fb02041fbeb9ed47535012dd80bfbefd8f1b7

  • SHA512

    1cb76b9a543b12b0a4d52bb2d70809e8752e6f7ef93ca2cd0238e78e72c411002f9c51e8e62f9f0e299fe7aade8af0339104e2c44e57d55b84d6e29196cdbd8f

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdJY:oemTLkNdfE0pZrwv

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5037bd17597d5e22baaf7c5d2b0a5f0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections