Overview

overview

10

Static

static

1

3bf2553481...99.exe

windows7-x64

10

3bf2553481...99.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3bf255348117de475c60072b80fc63c2af9cd4fe35634736c23f1203c3610599

  • Size

    1024KB

  • Sample

    221125-lvt1zaha29

  • MD5

    fb0ba24217c696f407fee5865f48b90a

  • SHA1

    b9af117a04cc08e668131417770d2f8f659174cc

  • SHA256

    3bf255348117de475c60072b80fc63c2af9cd4fe35634736c23f1203c3610599

  • SHA512

    2b49fb88b4d1ea968131ce0798843bf3eb9df85f5cc21ac2671491b0f73a0ef327e0a6bf74aff7f93cfc0bf3be5ad5283e2e96c0683ef8f251d573868da436ee

  • SSDEEP

    24576:RbTw1u73+oct8KqU7IAmeolqXWToVU0Cq9TBT:VT4Q3ot8o7mfoXtUxq9TBT

Score
10/10
kpotstealertrojan

Malware Config

Targets

    • Target

      3bf255348117de475c60072b80fc63c2af9cd4fe35634736c23f1203c3610599

    • Size

      1024KB

    • MD5

      fb0ba24217c696f407fee5865f48b90a

    • SHA1

      b9af117a04cc08e668131417770d2f8f659174cc

    • SHA256

      3bf255348117de475c60072b80fc63c2af9cd4fe35634736c23f1203c3610599

    • SHA512

      2b49fb88b4d1ea968131ce0798843bf3eb9df85f5cc21ac2671491b0f73a0ef327e0a6bf74aff7f93cfc0bf3be5ad5283e2e96c0683ef8f251d573868da436ee

    • SSDEEP

      24576:RbTw1u73+oct8KqU7IAmeolqXWToVU0Cq9TBT:VT4Q3ot8o7mfoXtUxq9TBT

    Score
    10/10
    kpotstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks