General

  • Target

    a04f5e58cc67bff166ac4d3bc3b697e0N.exe

  • Size

    1.9MB

  • MD5

    a04f5e58cc67bff166ac4d3bc3b697e0

  • SHA1

    e4ff7291ce0c886129198a337f7a31ec60d4bba1

  • SHA256

    3984f667b0b4aab596004f31dd15787151cd562e46d98993716ade0f5ba0a937

  • SHA512

    c12c4d3a0660622bdcb4ed49288f9cc44e3ab9c433794c86196a412de545a82d3130e7f3bf7af378a13c4484e8324c870535391bcdee48d06d21317d68b45453

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdmcz:oemTLkNdfE0pZrws

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a04f5e58cc67bff166ac4d3bc3b697e0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections