kpot

General

Target

7446197b9ad032dd0d5c6fdeb96f01b68f9a54cdec19d57d5ebedbe72c09adf4_NeikiAnalytics.exe
Size

2.0MB
Sample

240622-a5g9dasgqj
MD5

1129025a2ddbee75ecb707ff4bd5bb90
SHA1

9a66f16c40276bc6480f08ec5fdd502dc214f166
SHA256

7446197b9ad032dd0d5c6fdeb96f01b68f9a54cdec19d57d5ebedbe72c09adf4
SHA512

dc0152e469db93889ce7e5984279e18a19aacf930b311114c13a53b93650e3e8b15d2cd3bd49cf653debeb06b3e8d24918489a95f91bad0a867f292955b1eaaf
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pbNB:BemTLkNdfE0pZrwJ

Score

10^/10

Malware Config

Targets

- Target
  
  7446197b9ad032dd0d5c6fdeb96f01b68f9a54cdec19d57d5ebedbe72c09adf4_NeikiAnalytics.exe
- Size
  
  2.0MB
- MD5
  
  1129025a2ddbee75ecb707ff4bd5bb90
- SHA1
  
  9a66f16c40276bc6480f08ec5fdd502dc214f166
- SHA256
  
  7446197b9ad032dd0d5c6fdeb96f01b68f9a54cdec19d57d5ebedbe72c09adf4
- SHA512
  
  dc0152e469db93889ce7e5984279e18a19aacf930b311114c13a53b93650e3e8b15d2cd3bd49cf653debeb06b3e8d24918489a95f91bad0a867f292955b1eaaf
- SSDEEP
  
  49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pbNB:BemTLkNdfE0pZrwJ
Score

10^/10

kpot xmrig miner persistence privilege_escalation stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1546

Accessibility Features

1

T1546.008

Privilege Escalation

Event Triggered Execution

1

T1546

Accessibility Features

1

T1546.008

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

KPOT Core Executable

xmrig

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2