General

  • Target

    e4e38ebd4fb4720dddca340c702780c70920b3aed4267714635bdcffdf779462N

  • Size

    1.6MB

  • MD5

    dd1e24c138ef4307ae468e5111fc82a0

  • SHA1

    1ac083162fc556ea17753dee5c913a6bed68dc4d

  • SHA256

    e4e38ebd4fb4720dddca340c702780c70920b3aed4267714635bdcffdf779462

  • SHA512

    5f26dfd25cf487d54eec9100fbac41560405f76bd67ada13edf532426498eceb315bde045350bb43ca70890e2fb37465420f4c174dc7a3588e066d240b4e72db

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6StVEnmcKxYKKI5p:RWWBibyS

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e4e38ebd4fb4720dddca340c702780c70920b3aed4267714635bdcffdf779462N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections