General

  • Target

    63c3621d105b18363a017ce09a576f8b26af980cd25efea41acad5aa19d30d2cN

  • Size

    1.2MB

  • MD5

    c8546ed42911b4b333ab5d6b2ef88c90

  • SHA1

    0f4cb54ed3ea8a758300f61a1372a15c10412937

  • SHA256

    63c3621d105b18363a017ce09a576f8b26af980cd25efea41acad5aa19d30d2c

  • SHA512

    57d1919c3d749158ea38c0115f0d67360ca5d631747c2d214783731cda3305ca22637c56fbaac24fc2ce995bfb985bdda49753c2cd9a9d7c2a8d8f66ac018e03

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQGCZLFdGm13J/NuBm6:ROdWCCi7/raZ5aIwC+Agr6S/FpJR6

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 63c3621d105b18363a017ce09a576f8b26af980cd25efea41acad5aa19d30d2cN
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections