General

  • Target

    ee37130e603ce76048c2526bb5aa387c22c031688e2311637d215c5c3be634dcN

  • Size

    1.8MB

  • MD5

    a7a1f41e7209ef5787325073c7bfb7b0

  • SHA1

    0bd15e1b1ed76db0cbdf7a91b13e8f3398ce620a

  • SHA256

    ee37130e603ce76048c2526bb5aa387c22c031688e2311637d215c5c3be634dc

  • SHA512

    3881075171cf08f86745b7aa0530bd4b1a401f43201e4c69d8111c2adb56866915ac743e0d3f529d04d7c2771df7dfe600733648cbbaf48e4492a525898b24c2

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWg/b:RWWBibyt

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ee37130e603ce76048c2526bb5aa387c22c031688e2311637d215c5c3be634dcN
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections