kpot

General

Target

aabea69c871804b4cb254cc1c068a200a891629fd0672752503f3c76cacff845
Size

2.0MB
Sample

240306-2mv63acb7t
MD5

351d4a590606411abd7de625cd8a62c1
SHA1

1faaec3befe697771d546d302b975493b432b7a0
SHA256

aabea69c871804b4cb254cc1c068a200a891629fd0672752503f3c76cacff845
SHA512

eda3f0a3e31ba211687d7a014f617e19a83ba52e16ae639b1e0c8c97a5ce8a90531a1bb76c95124fd25bbbef97e01f3695f8d46af17189ea9894f16c22c5f268
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcvQvEh:BemTLkNdfE0pZrwP

Score

10^/10

Malware Config

Targets

- Target
  
  aabea69c871804b4cb254cc1c068a200a891629fd0672752503f3c76cacff845
- Size
  
  2.0MB
- MD5
  
  351d4a590606411abd7de625cd8a62c1
- SHA1
  
  1faaec3befe697771d546d302b975493b432b7a0
- SHA256
  
  aabea69c871804b4cb254cc1c068a200a891629fd0672752503f3c76cacff845
- SHA512
  
  eda3f0a3e31ba211687d7a014f617e19a83ba52e16ae639b1e0c8c97a5ce8a90531a1bb76c95124fd25bbbef97e01f3695f8d46af17189ea9894f16c22c5f268
- SSDEEP
  
  49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcvQvEh:BemTLkNdfE0pZrwP
Score

10^/10

kpot xmrig miner stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

KPOT Core Executable

xmrig

UPX dump on OEP (original entry point)

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2