General

  • Target

    a76f1a897ac7fe83d279c5bb16d18a6d7016f9816b4f41d72453e69e345eb1e4

  • Size

    1.8MB

  • MD5

    f518b32695d72effcd5c95c41ccd8e8a

  • SHA1

    aaf8958c6a913f0bfd763b64fdcfd41b5b57b25d

  • SHA256

    a76f1a897ac7fe83d279c5bb16d18a6d7016f9816b4f41d72453e69e345eb1e4

  • SHA512

    63d35d906596ff5d4c651087076b596e82585ac23cb7f9297488cdd90e7a570cd2c39d3df0858f35e38c445932b2e324a79ad1440cff1abfbbe1aab17cdaca9d

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEn0kz:BemTLkNdfE0pZrw1

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a76f1a897ac7fe83d279c5bb16d18a6d7016f9816b4f41d72453e69e345eb1e4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections