General

  • Target

    435daedb2bb669a948832ae283e830e853de5c6cc5858cfa94f3c561bf9b6b0aN

  • Size

    1.5MB

  • MD5

    e570dc1cbfb33d4aab26f99438045080

  • SHA1

    81b73310cbe5ca1fb474e267eb5a650e290fd29c

  • SHA256

    435daedb2bb669a948832ae283e830e853de5c6cc5858cfa94f3c561bf9b6b0a

  • SHA512

    809fb5adadb84d414fb2745993c117758af5d32890d4a05ba9e7ec7b5639f5a12e1890af23a4fd2be420eb5fe28e3c2c764c5c4e1f09ce8bcc24e5c73d88d456

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6SNasrsFCZq6f7:RWWBiby0

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 435daedb2bb669a948832ae283e830e853de5c6cc5858cfa94f3c561bf9b6b0aN
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections