Overview

overview

10

Static

static

10

8e9c5fb788...0N.exe

windows7-x64

10

8e9c5fb788...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e9c5fb78895cc55c4fa15ddebf68e20N.exe

  • Size

    1.5MB

  • Sample

    240722-k6j5gayhrd

  • MD5

    8e9c5fb78895cc55c4fa15ddebf68e20

  • SHA1

    488a208c99a02cc83b7c8f800e649bdc2a03e405

  • SHA256

    99dd2c356038c4438fd75ca966aaf96894a7f3a6e275cece8dd27f267cb81a73

  • SHA512

    1ef42406ac3be843d29bb6c9bd0f15e5ed1169d1d0deb8f60918baea80ec024f7d51c6930cd7df9dde69e8e467692296e80fdb69f994aa158c03354a24a05fbc

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hl+dZm1Zw:ROdWCCi7/raZ5aIwC+Agr6StYCD

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      8e9c5fb78895cc55c4fa15ddebf68e20N.exe

    • Size

      1.5MB

    • MD5

      8e9c5fb78895cc55c4fa15ddebf68e20

    • SHA1

      488a208c99a02cc83b7c8f800e649bdc2a03e405

    • SHA256

      99dd2c356038c4438fd75ca966aaf96894a7f3a6e275cece8dd27f267cb81a73

    • SHA512

      1ef42406ac3be843d29bb6c9bd0f15e5ed1169d1d0deb8f60918baea80ec024f7d51c6930cd7df9dde69e8e467692296e80fdb69f994aa158c03354a24a05fbc

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hl+dZm1Zw:ROdWCCi7/raZ5aIwC+Agr6StYCD

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks