kpot

General

Target

45b52d6f2bb450136c79b715e702117407929c186affc75a0f76e8b841a74124
Size

2.2MB
Sample

240613-152wwssdme
MD5

0f895da0884e67bd3ba20c455ef315b4
SHA1

f0a54a80147c7932629a541be44b69bb456005e8
SHA256

45b52d6f2bb450136c79b715e702117407929c186affc75a0f76e8b841a74124
SHA512

55d93ce5f7971d41682d4e59dc54ffbee0da7e544e932718592394de68cfdcc9eda813c6959342efe27f8487a7ec6b36f015f18ef8d440df0d46d61cc3b3362c
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/Fppa5GeP3w:BemTLkNdfE0pZrw8

Score

10^/10

Malware Config

Targets

- Target
  
  45b52d6f2bb450136c79b715e702117407929c186affc75a0f76e8b841a74124
- Size
  
  2.2MB
- MD5
  
  0f895da0884e67bd3ba20c455ef315b4
- SHA1
  
  f0a54a80147c7932629a541be44b69bb456005e8
- SHA256
  
  45b52d6f2bb450136c79b715e702117407929c186affc75a0f76e8b841a74124
- SHA512
  
  55d93ce5f7971d41682d4e59dc54ffbee0da7e544e932718592394de68cfdcc9eda813c6959342efe27f8487a7ec6b36f015f18ef8d440df0d46d61cc3b3362c
- SSDEEP
  
  49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/Fppa5GeP3w:BemTLkNdfE0pZrw8
Score

10^/10

kpot xmrig miner stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

KPOT Core Executable

xmrig

UPX dump on OEP (original entry point)

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2