kpot

General

Target

55eaabbb16b2ba31a643f392782ea6ed3c3e41acd917155a18879076c61d6369
Size

2.2MB
Sample

240613-2z8b6athmg
MD5

330de6fffa43e980980f3e89f1a03cb8
SHA1

2cbc2080fcc988f3c1a795e5430af4ff754b2f44
SHA256

55eaabbb16b2ba31a643f392782ea6ed3c3e41acd917155a18879076c61d6369
SHA512

0a34c0013bac512ceb4a2f789a09bfad4dd642b9378dd2fbe8ee6f4abb8a9fe3e50fc8b739b7d251168058aea41dbae5f7639ae1bedce34b36a353215164ae2a
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/Fppa5GePd:BemTLkNdfE0pZrw5

Score

10^/10

Malware Config

Targets

- Target
  
  55eaabbb16b2ba31a643f392782ea6ed3c3e41acd917155a18879076c61d6369
- Size
  
  2.2MB
- MD5
  
  330de6fffa43e980980f3e89f1a03cb8
- SHA1
  
  2cbc2080fcc988f3c1a795e5430af4ff754b2f44
- SHA256
  
  55eaabbb16b2ba31a643f392782ea6ed3c3e41acd917155a18879076c61d6369
- SHA512
  
  0a34c0013bac512ceb4a2f789a09bfad4dd642b9378dd2fbe8ee6f4abb8a9fe3e50fc8b739b7d251168058aea41dbae5f7639ae1bedce34b36a353215164ae2a
- SSDEEP
  
  49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/Fppa5GePd:BemTLkNdfE0pZrw5
Score

10^/10

kpot xmrig miner stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

KPOT Core Executable

xmrig

UPX dump on OEP (original entry point)

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2