kpot | 4389f9f7434c3e9820b1fb7e5321de3a9f90e49be95399b26a5c1767aba97ef6 | Triage

Submit
Reports

Overview

overview

Static

static

cb91d658d4...cs.exe

windows7-x64

cb91d658d4...cs.exe

windows10-2004-x64

Sharing

General

Target

cb91d658d40e150e51dac94e62aa55b0_NeikiAnalytics.exe
Size

2.5MB
Sample

240616-ccbx1aydlk
MD5

cb91d658d40e150e51dac94e62aa55b0
SHA1

886722b5543f97e566666b2acb8e3c645b383230
SHA256

4389f9f7434c3e9820b1fb7e5321de3a9f90e49be95399b26a5c1767aba97ef6
SHA512

549d59fb42dbd296506eefb34aa0e3faf33d15a74536222a6edc74e853135c9c37938edf78c811a8ef0957d2fa0d6c3c4dbcc551e952abbee573397e6acf240f
SSDEEP

49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eohW:oemTLkNdfE0pZrw6

Score

10^/10

kpot xmrig miner stealer trojan upx

Static task

static1

miner upx kpot xmrig

6 signatures

Behavioral task

behavioral1

Sample

cb91d658d40e150e51dac94e62aa55b0_NeikiAnalytics.exe

Resource

win7-20240220-en

kpot xmrig miner stealer trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

cb91d658d40e150e51dac94e62aa55b0_NeikiAnalytics.exe

Resource

win10v2004-20240508-en

kpot xmrig miner stealer trojan upx

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  cb91d658d40e150e51dac94e62aa55b0_NeikiAnalytics.exe
- Size
  
  2.5MB
- MD5
  
  cb91d658d40e150e51dac94e62aa55b0
- SHA1
  
  886722b5543f97e566666b2acb8e3c645b383230
- SHA256
  
  4389f9f7434c3e9820b1fb7e5321de3a9f90e49be95399b26a5c1767aba97ef6
- SHA512
  
  549d59fb42dbd296506eefb34aa0e3faf33d15a74536222a6edc74e853135c9c37938edf78c811a8ef0957d2fa0d6c3c4dbcc551e952abbee573397e6acf240f
- SSDEEP
  
  49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eohW:oemTLkNdfE0pZrw6
Score

10^/10

kpot xmrig miner stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

minerupxkpotxmrig

behavioral1

kpotxmrigminerstealertrojanupx

behavioral2

kpotxmrigminerstealertrojanupx

© 2018-2025

Terms | Privacy