General

  • Target

    262da8bb8a2ba226d58a9677f6230980N.exe

  • Size

    1.9MB

  • MD5

    262da8bb8a2ba226d58a9677f6230980

  • SHA1

    afff5dae4b7453b6e41dca75d102a4b22cb0d41c

  • SHA256

    041181aa56a6e9a4199cff762cf76e33389fe2e8850d09c0d16d29ee2c83ed93

  • SHA512

    c53da441721cc7d38fe1a2366b259d5d9fd28c06c1312d1276052dc6ce591c4ba3cd1168ea3844d376c6df569dbd349c8436c9540304c469f6606785ac7f2924

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdt:oemTLkNdfE0pZrwa

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 262da8bb8a2ba226d58a9677f6230980N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections