General

  • Target

    7bd25aec85844946b4833ddb182452a6b1ac8773ee19d9da5aa13f972d0c238eN

  • Size

    1.7MB

  • MD5

    639d5c68964a18a33318b2ddd854aea0

  • SHA1

    8ddb691422157c58f23927e282aba21ca761f7a6

  • SHA256

    7bd25aec85844946b4833ddb182452a6b1ac8773ee19d9da5aa13f972d0c238e

  • SHA512

    67a1af69ffcaeb3ec1cfec862cd9a334fb7d06d673696d9b4fe9cdae5706413da51017a8404b1bbadd98c00d4afa3172a96d21e95b2e3bb84ca78f6bb310d7ed

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWgU:RWWBibyK

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7bd25aec85844946b4833ddb182452a6b1ac8773ee19d9da5aa13f972d0c238eN
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections