Overview

overview

10

Static

static

10

b677d4ac4e...3N.exe

windows7-x64

10

b677d4ac4e...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b677d4ac4e2d4b5e1c447478ae0d9aa10f3f5206dc8d84f7932f216d426945a3N

  • Size

    1.7MB

  • MD5

    07c7faf2ee2ae8bab6009e75b51f6820

  • SHA1

    6710e882ee50d80fbc59c154d9f747e66798d963

  • SHA256

    b677d4ac4e2d4b5e1c447478ae0d9aa10f3f5206dc8d84f7932f216d426945a3

  • SHA512

    5a09e283939819d8b53e97a75c2798c1a2ee6e8308fff783d300de74fbdeccb09bff754f62040e05a3ba7967b74788c3554665cf4c4e08f3899f01de3fbacf29

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWgdz:RWWBibyr

Score
10/10
upxminerkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b677d4ac4e2d4b5e1c447478ae0d9aa10f3f5206dc8d84f7932f216d426945a3N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections