kpot | 55488ee3b8fcbee2e0d787872441b8e987efec7a5e1666f3a9bc2c930894ccfa | Triage

Submit
Reports

Overview

overview

Static

static

5dbdfee238...cs.exe

windows7-x64

5dbdfee238...cs.exe

windows10-2004-x64

Sharing

General

Target

5dbdfee238aeedcc8c28d9bcacb98b70_NeikiAnalytics.exe
Size

1.9MB
Sample

240602-y1kqpsde9x
MD5

5dbdfee238aeedcc8c28d9bcacb98b70
SHA1

9e7cd8b6b2fdefd71f356a50afc87e4b47f88071
SHA256

55488ee3b8fcbee2e0d787872441b8e987efec7a5e1666f3a9bc2c930894ccfa
SHA512

bcf8a8b3e989e91f3eabbb47318fbafdba73dd910c728b074315a39cb64ce7005a03ff99eb22a70b19d0b2e6bac6930b8a640381a20d3a7eb0c287f49dc766e5
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pb+:BemTLkNdfE0pZrwY

Score

10^/10

kpot xmrig miner stealer trojan upx

Static task

static1

miner upx kpot xmrig

6 signatures

Behavioral task

behavioral1

Sample

5dbdfee238aeedcc8c28d9bcacb98b70_NeikiAnalytics.exe

Resource

win7-20240220-en

kpot xmrig miner stealer trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

5dbdfee238aeedcc8c28d9bcacb98b70_NeikiAnalytics.exe

Resource

win10v2004-20240426-en

kpot xmrig miner stealer trojan upx

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  5dbdfee238aeedcc8c28d9bcacb98b70_NeikiAnalytics.exe
- Size
  
  1.9MB
- MD5
  
  5dbdfee238aeedcc8c28d9bcacb98b70
- SHA1
  
  9e7cd8b6b2fdefd71f356a50afc87e4b47f88071
- SHA256
  
  55488ee3b8fcbee2e0d787872441b8e987efec7a5e1666f3a9bc2c930894ccfa
- SHA512
  
  bcf8a8b3e989e91f3eabbb47318fbafdba73dd910c728b074315a39cb64ce7005a03ff99eb22a70b19d0b2e6bac6930b8a640381a20d3a7eb0c287f49dc766e5
- SSDEEP
  
  49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pb+:BemTLkNdfE0pZrwY
Score

10^/10

kpot xmrig miner stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

minerupxkpotxmrig

behavioral1

kpotxmrigminerstealertrojanupx

behavioral2

kpotxmrigminerstealertrojanupx

© 2018-2025

Terms | Privacy