General

  • Target

    1342f1d01e59b4368235df1355c55c93745b7c0530807d55548ff80b74c08171N

  • Size

    1.6MB

  • MD5

    a2ed866c903a507165e26f6240e22080

  • SHA1

    1849c5c8462ee4f9ab07cc082aa8480fc3fba9d9

  • SHA256

    1342f1d01e59b4368235df1355c55c93745b7c0530807d55548ff80b74c08171

  • SHA512

    b1bcdc13bd16d5d96e061af4f5d95d3fffa9d906645e6affb40daa56f008ffe843a8e213164c0bd219961b02c21dfb7c3a499b082a6ab4d073f67b1afd0b6bd9

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hlrZUaZngFm:ROdWCCi7/raZ5aIwC+Agr6StY9Co

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1342f1d01e59b4368235df1355c55c93745b7c0530807d55548ff80b74c08171N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections