Overview

overview

10

Static

static

10

70c2061e92...77.exe

windows7-x64

10

70c2061e92...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70c2061e92656cb8394303a7f215bf6b533dcf2f6f2ecf17b16ccbb633a81077

  • Size

    2.0MB

  • Sample

    240610-qrhwraxgrq

  • MD5

    627f56d3dfc66c65c658d56bc4c58e6e

  • SHA1

    1243a8691547134ff7fe8c78439de36c603132d7

  • SHA256

    70c2061e92656cb8394303a7f215bf6b533dcf2f6f2ecf17b16ccbb633a81077

  • SHA512

    dc4b766a60b58a1904d88b3b84b215771bb5f3115d43ffa51e2d9c2c505958a8d81d7cb558b097f82d289500c4e196691d2d4c8c5a5ac4ffec4b8ae51d7338bc

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2e:GemTLkNdfE0pZaQm

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      70c2061e92656cb8394303a7f215bf6b533dcf2f6f2ecf17b16ccbb633a81077

    • Size

      2.0MB

    • MD5

      627f56d3dfc66c65c658d56bc4c58e6e

    • SHA1

      1243a8691547134ff7fe8c78439de36c603132d7

    • SHA256

      70c2061e92656cb8394303a7f215bf6b533dcf2f6f2ecf17b16ccbb633a81077

    • SHA512

      dc4b766a60b58a1904d88b3b84b215771bb5f3115d43ffa51e2d9c2c505958a8d81d7cb558b097f82d289500c4e196691d2d4c8c5a5ac4ffec4b8ae51d7338bc

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2e:GemTLkNdfE0pZaQm

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks