General

  • Target

    abc558088f9c3fc778ab811062bf15940db02cc27aee0152c290016506fc9a61N

  • Size

    1.7MB

  • MD5

    8cf04db1fbed70d5692e7f47a882c650

  • SHA1

    c1d339dbe35a264785d6da773356e2e921bca34e

  • SHA256

    abc558088f9c3fc778ab811062bf15940db02cc27aee0152c290016506fc9a61

  • SHA512

    2a3d7f307257aa758b234b86722b67cd35d56ff1712057b7f658873adf1ee47b7acbdd7113c86de51cad49020b6073e6d0e832d63a9cffa3efe4c6146f82fc3d

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWg2:RWWBibyM

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • abc558088f9c3fc778ab811062bf15940db02cc27aee0152c290016506fc9a61N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections