76c39773f1b2801f46d8856d7ad46b97ef500ac07febec3f0bcf623c326aea87 | Triage

Resubmissions

22-07-2021 10:18

210722-5mlbkea2zs 7

21-07-2021 12:57

210721-e9hy74lh3j 7

Sharing

General

Target

kpot.exe
Size

85KB
Sample

210721-e9hy74lh3j
MD5

1562b53d6506283b35d3beaf2dec92e8
SHA1

fcf2918829132cd43890129b8255f1d1533e07ab
SHA256

76c39773f1b2801f46d8856d7ad46b97ef500ac07febec3f0bcf623c326aea87
SHA512

3ecc8951c9dd308b59a69f7966956abf703c58d8f2f6ca059f9a9350e8d6679eb8063c7c31e4247cfd1cf31f2e2296c53b57b46f9c5b50fdf59c196950ac51b4

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  kpot.exe
- Size
  
  85KB
- MD5
  
  1562b53d6506283b35d3beaf2dec92e8
- SHA1
  
  fcf2918829132cd43890129b8255f1d1533e07ab
- SHA256
  
  76c39773f1b2801f46d8856d7ad46b97ef500ac07febec3f0bcf623c326aea87
- SHA512
  
  3ecc8951c9dd308b59a69f7966956abf703c58d8f2f6ca059f9a9350e8d6679eb8063c7c31e4247cfd1cf31f2e2296c53b57b46f9c5b50fdf59c196950ac51b4
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2