General

  • Target

    9a7ef76e6cb33038c6f018c91a4e7350N

  • Size

    1.4MB

  • MD5

    9a7ef76e6cb33038c6f018c91a4e7350

  • SHA1

    5683275c3688d9dc22b2e14606f0e5cf6fde5d9b

  • SHA256

    808091f64e15180c26ff8b596b8ce02d28108ec3473d0f9e46b03dff4e1c0991

  • SHA512

    ed1f1a851fb8cc3bf6fe459da4fe9e651c5ef98e314878c329d2b5972e5fdffcbf46d9a67f232be204e9099cd021de6e097c77c922957622eb7961e00dae6488

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+s8juCCRu:ROdWCCi7/raZ5aIwC+Agr6SNasrsFC3

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a7ef76e6cb33038c6f018c91a4e7350N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections