Overview

overview

10

Static

static

10

043b3d986d...2c.exe

windows7-x64

10

043b3d986d...2c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    043b3d986d75152dcfa1040e7ca2d97b489ca078d36467f2988febd041a8822c.exe

  • Size

    1.5MB

  • Sample

    240703-x7q1mavakn

  • MD5

    3f24e4fbaffdf0e04c39cd1198498f20

  • SHA1

    0e864e413b97eb0236a8baf4c6bd518330e36c9c

  • SHA256

    043b3d986d75152dcfa1040e7ca2d97b489ca078d36467f2988febd041a8822c

  • SHA512

    8343c1b166c2c9175ec240f77be6bc384e13bff8beece47d5eec01835114794567b4b2ff5d119e6323044d780819b64319f474b554711d322ce89725a15b38fa

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hl+dZQZz:ROdWCCi7/raZ5aIwC+Agr6StYCI

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      043b3d986d75152dcfa1040e7ca2d97b489ca078d36467f2988febd041a8822c.exe

    • Size

      1.5MB

    • MD5

      3f24e4fbaffdf0e04c39cd1198498f20

    • SHA1

      0e864e413b97eb0236a8baf4c6bd518330e36c9c

    • SHA256

      043b3d986d75152dcfa1040e7ca2d97b489ca078d36467f2988febd041a8822c

    • SHA512

      8343c1b166c2c9175ec240f77be6bc384e13bff8beece47d5eec01835114794567b4b2ff5d119e6323044d780819b64319f474b554711d322ce89725a15b38fa

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hl+dZQZz:ROdWCCi7/raZ5aIwC+Agr6StYCI

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks