General

  • Target

    e7b7d99d0561d7f5827ecdc8907e4130N.exe

  • Size

    1.4MB

  • MD5

    e7b7d99d0561d7f5827ecdc8907e4130

  • SHA1

    34fb8f40e158459a7074ffe1aba6123e4c38e0ca

  • SHA256

    1dfb78ab914fbcf50c6cfa7254ab9f11012650c4acd9d9b0ffb02d93d511bf6c

  • SHA512

    5a03455526fc0f3f6696b768f1fd639bbe51f98e4c9519843fff23bafb605e6aa01e7f009f3a20cd639d8ae90a9951d85f09516090026b11001f266317498bf6

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQt+4En+bcMAOxA5zYlU+jCcl4M:ROdWCCi7/raZ5aIwC+Agr6StVEnmcKxF

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e7b7d99d0561d7f5827ecdc8907e4130N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections