kpot | 6b12b5a1678e52408e75746179f22f6d834e644655742c281aa6e8d980a43fd3 | Triage

Submit
Reports

Overview

overview

Static

static

d33b0ee41f...cs.exe

windows7-x64

d33b0ee41f...cs.exe

windows10-2004-x64

Sharing

General

Target

d33b0ee41f90010fd44d2a4aa562a430_NeikiAnalytics.exe
Size

2.2MB
Sample

240525-rggflsfc7w
MD5

d33b0ee41f90010fd44d2a4aa562a430
SHA1

147f44ce470ebb7bdad2f8dc6ea7967df70dc029
SHA256

6b12b5a1678e52408e75746179f22f6d834e644655742c281aa6e8d980a43fd3
SHA512

e3d3a3665e88f42dab8674e39778515abae872a0489be4d9b34dd94560264a4e8fbb9ef19dd16b0bb0201beaa52dc7725443ce3d3c0f5cc2e20f5751aad6ccbb
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O1a2uk:BemTLkNdfE0pZrww

Score

10^/10

kpot xmrig miner stealer trojan upx

Static task

static1

miner upx kpot xmrig

6 signatures

Behavioral task

behavioral1

Sample

d33b0ee41f90010fd44d2a4aa562a430_NeikiAnalytics.exe

Resource

win7-20240215-en

kpot xmrig miner stealer trojan upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

d33b0ee41f90010fd44d2a4aa562a430_NeikiAnalytics.exe

Resource

win10v2004-20240426-en

kpot xmrig miner stealer trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  d33b0ee41f90010fd44d2a4aa562a430_NeikiAnalytics.exe
- Size
  
  2.2MB
- MD5
  
  d33b0ee41f90010fd44d2a4aa562a430
- SHA1
  
  147f44ce470ebb7bdad2f8dc6ea7967df70dc029
- SHA256
  
  6b12b5a1678e52408e75746179f22f6d834e644655742c281aa6e8d980a43fd3
- SHA512
  
  e3d3a3665e88f42dab8674e39778515abae872a0489be4d9b34dd94560264a4e8fbb9ef19dd16b0bb0201beaa52dc7725443ce3d3c0f5cc2e20f5751aad6ccbb
- SSDEEP
  
  49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O1a2uk:BemTLkNdfE0pZrww
Score

10^/10

kpot xmrig miner stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

minerupxkpotxmrig

behavioral1

kpotxmrigminerstealertrojanupx

behavioral2

kpotxmrigminerstealertrojanupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.