Overview

overview

10

Static

static

10

7b22547f5a...0N.exe

windows7-x64

10

7b22547f5a...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b22547f5ae29daf6cf758db96c52ba0N.exe

  • Size

    1.4MB

  • Sample

    240723-hd5jlashnr

  • MD5

    7b22547f5ae29daf6cf758db96c52ba0

  • SHA1

    ff620c13d74e5a72f671d368d136c1e1244ea9ce

  • SHA256

    2571c9a6758b664e99565b20bd18f62003802516f3b122e734d003d52237c07a

  • SHA512

    e6ab8eae7493879802ef67ab9cf45ba49a0fa2e703c2001c46d86c3b28654dee8d1bfb9bdd92bc4e29fbe07bb3cb338d3bec1da3ce507b50f2b1b8194c291bb1

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+s8juCCRc:ROdWCCi7/raZ5aIwC+Agr6SNasrsFCl

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      7b22547f5ae29daf6cf758db96c52ba0N.exe

    • Size

      1.4MB

    • MD5

      7b22547f5ae29daf6cf758db96c52ba0

    • SHA1

      ff620c13d74e5a72f671d368d136c1e1244ea9ce

    • SHA256

      2571c9a6758b664e99565b20bd18f62003802516f3b122e734d003d52237c07a

    • SHA512

      e6ab8eae7493879802ef67ab9cf45ba49a0fa2e703c2001c46d86c3b28654dee8d1bfb9bdd92bc4e29fbe07bb3cb338d3bec1da3ce507b50f2b1b8194c291bb1

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+s8juCCRc:ROdWCCi7/raZ5aIwC+Agr6SNasrsFCl

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks