Overview

overview

10

Static

static

10

f643c8a900...fa.exe

windows7-x64

10

f643c8a900...fa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f643c8a900fb183b719f14d04f31d19a05386ff5d9ebc294c64964007e25fdfa

  • Size

    2.0MB

  • Sample

    240702-f4aqss1hlm

  • MD5

    16339894cd359e5dc4ddf73413c66df7

  • SHA1

    57546e4ff20a16211687267aa14acbef9970518b

  • SHA256

    f643c8a900fb183b719f14d04f31d19a05386ff5d9ebc294c64964007e25fdfa

  • SHA512

    3cde9133a3aa0ef8f66f5fd258d5b9d1f2e8c809e7bbdce8c277d140d6a46e6bd61483315ff1efa97b030f65804ec66a8e6f4e31cf29e2a7dc6b7f41e0cd1b83

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3s:BemTLkNdfE0pZrwE

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      f643c8a900fb183b719f14d04f31d19a05386ff5d9ebc294c64964007e25fdfa

    • Size

      2.0MB

    • MD5

      16339894cd359e5dc4ddf73413c66df7

    • SHA1

      57546e4ff20a16211687267aa14acbef9970518b

    • SHA256

      f643c8a900fb183b719f14d04f31d19a05386ff5d9ebc294c64964007e25fdfa

    • SHA512

      3cde9133a3aa0ef8f66f5fd258d5b9d1f2e8c809e7bbdce8c277d140d6a46e6bd61483315ff1efa97b030f65804ec66a8e6f4e31cf29e2a7dc6b7f41e0cd1b83

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3s:BemTLkNdfE0pZrwE

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks