General

  • Target

    6cab766352310463f9e6b019edf56a7e0a5c4e0e4f555062b4c77265a101e241N

  • Size

    1.7MB

  • MD5

    146740f20e2e9876997ef73a93736130

  • SHA1

    108d87b6c48f2f2c187644d8d5a71214c5a8d94e

  • SHA256

    6cab766352310463f9e6b019edf56a7e0a5c4e0e4f555062b4c77265a101e241

  • SHA512

    21b5711b7c788ebdb85b8adc7fd87c7817a16755950f072fbce8bf83f61b29ee7e4979947ac146df77485a69ccaae4494858a8e49df79baf46a281a2dc17b6ca

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWgV:RWWBibyz

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6cab766352310463f9e6b019edf56a7e0a5c4e0e4f555062b4c77265a101e241N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections