General

  • Target

    3b4354d550a70658f16e37fb6e516410N.exe

  • Size

    1.1MB

  • MD5

    3b4354d550a70658f16e37fb6e516410

  • SHA1

    03428c1e40f4220436ab2c6a3590de37241d6543

  • SHA256

    ca200ec07bb7424f0bd2ed59339047914d6c1ea35dc5b93db1ae7fb1495665bf

  • SHA512

    6da21713c4c6ea0f6517809523819b95fe731e896767aa931fc6b42f33b5e90d3379f5f2f2e1fd1d2cf5fadd74ed7905ab4d42d056bb7a2517e56c933c76f64d

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQt4RiWgtCvr1Po7s:ROdWCCi7/raZ5aIwC+Agr6StKIa1QA

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b4354d550a70658f16e37fb6e516410N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections