Overview

overview

10

Static

static

10

53fcd4c478...05.exe

windows7-x64

10

53fcd4c478...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53fcd4c4782a728a16e31efafe3de23c968533c43c0ebf016b2bdfd10cf40505

  • Size

    1.9MB

  • Sample

    240314-yef6dsfd35

  • MD5

    0b422860b115aa117d30f4a318aea7bb

  • SHA1

    008ec6002a526446191f3779314021263e9ff633

  • SHA256

    53fcd4c4782a728a16e31efafe3de23c968533c43c0ebf016b2bdfd10cf40505

  • SHA512

    de6ae0e7cbeef5d292910a000ede0ab08a6514f3b3fd04e68ec8a124a6e30ddb66dd744f0f130107904d0a5388612ed5ad4b1aac1c1eba4ae2f40e7ad72df7c6

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNfG:BemTLkNdfE0pZrwF

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      53fcd4c4782a728a16e31efafe3de23c968533c43c0ebf016b2bdfd10cf40505

    • Size

      1.9MB

    • MD5

      0b422860b115aa117d30f4a318aea7bb

    • SHA1

      008ec6002a526446191f3779314021263e9ff633

    • SHA256

      53fcd4c4782a728a16e31efafe3de23c968533c43c0ebf016b2bdfd10cf40505

    • SHA512

      de6ae0e7cbeef5d292910a000ede0ab08a6514f3b3fd04e68ec8a124a6e30ddb66dd744f0f130107904d0a5388612ed5ad4b1aac1c1eba4ae2f40e7ad72df7c6

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNfG:BemTLkNdfE0pZrwF

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks