Overview

overview

10

Static

static

10

2c921dc7f1...50.exe

windows7-x64

10

2c921dc7f1...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c921dc7f198a4a6b9d0769ec734f550.exe

  • Size

    2.4MB

  • Sample

    240706-b94hvavdrd

  • MD5

    2c921dc7f198a4a6b9d0769ec734f550

  • SHA1

    19ea1040007eff81c5b26a10f683d0267817049c

  • SHA256

    985db3d5232d627786ef483a036dcc9a31b2a38ff76315a1c8b871b76917e716

  • SHA512

    b3a97ac76ff0f1776cf7deea1ddc1d385817cc970f1d006986cf7160af23be10df83cadc25403c3b5b0638912406106682ced88fd875533d729cbadb826a3ac4

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKrwwyGwSw32:BemTLkNdfE0pZrwS

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      2c921dc7f198a4a6b9d0769ec734f550.exe

    • Size

      2.4MB

    • MD5

      2c921dc7f198a4a6b9d0769ec734f550

    • SHA1

      19ea1040007eff81c5b26a10f683d0267817049c

    • SHA256

      985db3d5232d627786ef483a036dcc9a31b2a38ff76315a1c8b871b76917e716

    • SHA512

      b3a97ac76ff0f1776cf7deea1ddc1d385817cc970f1d006986cf7160af23be10df83cadc25403c3b5b0638912406106682ced88fd875533d729cbadb826a3ac4

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKrwwyGwSw32:BemTLkNdfE0pZrwS

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks