General

  • Target

    e5aad7bec5ae6c97a3cdd5b446936b6a7abe42a4f31c9b4f335026c6bb25fee4

  • Size

    1.8MB

  • MD5

    3a2ede71f2e43c9d6f9ec95d53c64048

  • SHA1

    4091e159683f4283cf983ae59bd852a537cda660

  • SHA256

    e5aad7bec5ae6c97a3cdd5b446936b6a7abe42a4f31c9b4f335026c6bb25fee4

  • SHA512

    0ede79c8874c1a47acbfa91b702db222ac4d26bd200b8a84212fa6a3f3f1aedcb99544124536758a86b07cda93ebb3e9c3bc6a9e73699075155817cf86f996c9

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SGtgf:BemTLkNdfE0pZrw6

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5aad7bec5ae6c97a3cdd5b446936b6a7abe42a4f31c9b4f335026c6bb25fee4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections