Overview

overview

10

Static

static

10

e56cdd4e9b...93.exe

windows7-x64

10

e56cdd4e9b...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e56cdd4e9b2061fcf084942e9fa4d1f6c884d311ce8ad9c4123d801b7a959e93

  • Size

    2.0MB

  • Sample

    240610-xf6xrsweqa

  • MD5

    7c8d7dc2fbb5f2847f0cc46fef1203f0

  • SHA1

    eba1485638e8d0d4bc7598baea0b38ac1d2b6b93

  • SHA256

    e56cdd4e9b2061fcf084942e9fa4d1f6c884d311ce8ad9c4123d801b7a959e93

  • SHA512

    3be5acc429bfe0fc384aa74f9e0423c2fad8b3a2ec02bfed75cbdbb73944a3b891db0e0e81353955dda4bc3cdcf1d2f8cd27bc55e45fb4a16993b94c66fd5f86

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2N:GemTLkNdfE0pZaQ1

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      e56cdd4e9b2061fcf084942e9fa4d1f6c884d311ce8ad9c4123d801b7a959e93

    • Size

      2.0MB

    • MD5

      7c8d7dc2fbb5f2847f0cc46fef1203f0

    • SHA1

      eba1485638e8d0d4bc7598baea0b38ac1d2b6b93

    • SHA256

      e56cdd4e9b2061fcf084942e9fa4d1f6c884d311ce8ad9c4123d801b7a959e93

    • SHA512

      3be5acc429bfe0fc384aa74f9e0423c2fad8b3a2ec02bfed75cbdbb73944a3b891db0e0e81353955dda4bc3cdcf1d2f8cd27bc55e45fb4a16993b94c66fd5f86

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2N:GemTLkNdfE0pZaQ1

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks