General

  • Target

    8222cd9660080d1ee94e3eae233eb700N.exe

  • Size

    1.4MB

  • Sample

    240723-h5er9avckm

  • MD5

    8222cd9660080d1ee94e3eae233eb700

  • SHA1

    b89434fe54341ee527fa97332935f2284ff9446d

  • SHA256

    140080013e28f1f5f88d46abaabf39eaa1ef6aca8725d01c9eafca6d734f85b3

  • SHA512

    d36f4d5b30610aa23ae157896fd400946e67f37b9326c65e05fb60098d0ef52521a6f7230b895ea1c0619c4772a9a339f3afeb1724dcc568f15aebe242ab1651

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+s8juCCnr:ROdWCCi7/raZ5aIwC+Agr6SNasrsFCG

Malware Config

Targets

    • Target

      8222cd9660080d1ee94e3eae233eb700N.exe

    • Size

      1.4MB

    • MD5

      8222cd9660080d1ee94e3eae233eb700

    • SHA1

      b89434fe54341ee527fa97332935f2284ff9446d

    • SHA256

      140080013e28f1f5f88d46abaabf39eaa1ef6aca8725d01c9eafca6d734f85b3

    • SHA512

      d36f4d5b30610aa23ae157896fd400946e67f37b9326c65e05fb60098d0ef52521a6f7230b895ea1c0619c4772a9a339f3afeb1724dcc568f15aebe242ab1651

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+s8juCCnr:ROdWCCi7/raZ5aIwC+Agr6SNasrsFCG

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks