General

  • Target

    bac330210d64d240096aab9242e5c8c0N.exe

  • Size

    1.9MB

  • MD5

    bac330210d64d240096aab9242e5c8c0

  • SHA1

    a468a5bbf35bd71d5bf8c50c9db8e610b0dbcf23

  • SHA256

    972f30f0d964c3748bbb2e021bedfb271b9cb9de60854b60d6ab2102ee1dab6c

  • SHA512

    d9189320151184ea7a422ee5cf9b7584672064a67b9875a50cde68a5b01cfe6084d9f37718b2d83a07d0b1fc617aaa0243870da82634ebf5a1047091366d64b9

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdj:oemTLkNdfE0pZrwo

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bac330210d64d240096aab9242e5c8c0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections