Overview

overview

10

Static

static

10

ee3b979878...0e.exe

windows7-x64

10

ee3b979878...0e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee3b9798784fffae6d0abfc691530b7841409637e30c641c1ef09a1e2fc5af0e

  • Size

    1.5MB

  • Sample

    240711-jtm5xswhqn

  • MD5

    092de62e385f7d762f6ccf788602cf3c

  • SHA1

    8cde55d1c04ea5310b3a761b49cefb3da374d256

  • SHA256

    ee3b9798784fffae6d0abfc691530b7841409637e30c641c1ef09a1e2fc5af0e

  • SHA512

    72ed534f72866990007517d11eff41f82e0767f981326aee3232922128cf09f5934079d81bc3aaf77441d10ea55885841a58109a1cd8df2f6d2f5f2ff4ce2afe

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6StVEnmcK9dFCfI:RWWBibyM

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      ee3b9798784fffae6d0abfc691530b7841409637e30c641c1ef09a1e2fc5af0e

    • Size

      1.5MB

    • MD5

      092de62e385f7d762f6ccf788602cf3c

    • SHA1

      8cde55d1c04ea5310b3a761b49cefb3da374d256

    • SHA256

      ee3b9798784fffae6d0abfc691530b7841409637e30c641c1ef09a1e2fc5af0e

    • SHA512

      72ed534f72866990007517d11eff41f82e0767f981326aee3232922128cf09f5934079d81bc3aaf77441d10ea55885841a58109a1cd8df2f6d2f5f2ff4ce2afe

    • SSDEEP

      49152:ROdWCCi7/raZ5aIwC+Agr6StVEnmcK9dFCfI:RWWBibyM

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks