General

  • Target

    c5326977311d019a81567866366dc782488c548c10cab4d0fd78f7dd8226507f

  • Size

    2.1MB

  • Sample

    240625-cmkb5aydln

  • MD5

    2f78a4de6c1eac2bb8cd87590f2f0835

  • SHA1

    4ca2f2049868756744c3ce6c09b6d3e818b65e55

  • SHA256

    c5326977311d019a81567866366dc782488c548c10cab4d0fd78f7dd8226507f

  • SHA512

    01226117e49dfec12bc3346b0efc2fc2e15634d1824775a2abfa3a28ee5d33ada227bf664fd9af3d787222584fbbb9121eabd7e3cd10bf6dc3e916b3554b07b8

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2r1z2c:GemTLkNdfE0pZaQF

Malware Config

Targets

    • Target

      c5326977311d019a81567866366dc782488c548c10cab4d0fd78f7dd8226507f

    • Size

      2.1MB

    • MD5

      2f78a4de6c1eac2bb8cd87590f2f0835

    • SHA1

      4ca2f2049868756744c3ce6c09b6d3e818b65e55

    • SHA256

      c5326977311d019a81567866366dc782488c548c10cab4d0fd78f7dd8226507f

    • SHA512

      01226117e49dfec12bc3346b0efc2fc2e15634d1824775a2abfa3a28ee5d33ada227bf664fd9af3d787222584fbbb9121eabd7e3cd10bf6dc3e916b3554b07b8

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2r1z2c:GemTLkNdfE0pZaQF

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks