Overview

overview

10

Static

static

10

211491ba4f...0N.exe

windows7-x64

10

211491ba4f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    211491ba4fb03a5caed0c98855d9bac0N.exe

  • Size

    2.4MB

  • Sample

    240706-2zhrhawcmn

  • MD5

    211491ba4fb03a5caed0c98855d9bac0

  • SHA1

    ca0543205ce146ca4234c907fe3a8767eff3f120

  • SHA256

    3e9bd5b0bb00bb44311a0f19415d5a6cbe48f87d5d70c22a8e9cb3ff7a0be740

  • SHA512

    4734e4cd4d20d4411012887271b22ab76cfefcf3508210487a575c2b4940fd0135bebef3891b8008af6a23e7c30ef84259161f665cab3c73adf3930322dc1acc

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+PI:BemTLkNdfE0pZrwA

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      211491ba4fb03a5caed0c98855d9bac0N.exe

    • Size

      2.4MB

    • MD5

      211491ba4fb03a5caed0c98855d9bac0

    • SHA1

      ca0543205ce146ca4234c907fe3a8767eff3f120

    • SHA256

      3e9bd5b0bb00bb44311a0f19415d5a6cbe48f87d5d70c22a8e9cb3ff7a0be740

    • SHA512

      4734e4cd4d20d4411012887271b22ab76cfefcf3508210487a575c2b4940fd0135bebef3891b8008af6a23e7c30ef84259161f665cab3c73adf3930322dc1acc

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+PI:BemTLkNdfE0pZrwA

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks