Overview

overview

10

Static

static

10

5e2739e623...44.exe

windows7-x64

10

5e2739e623...44.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e2739e6238d076770b5f343abf4c7d81d9d1d9a61edf7aa033e72ed36c03744

  • Size

    1.8MB

  • Sample

    240807-2aa1csyfrc

  • MD5

    291c1e6bf297e93c46c146f85f89f581

  • SHA1

    8a53fdf3417e4c213315a6674e1a773d26844043

  • SHA256

    5e2739e6238d076770b5f343abf4c7d81d9d1d9a61edf7aa033e72ed36c03744

  • SHA512

    9d99664d0e60300af8a4ca6fbe7c638a6626f8e7bf17456f44979c9f832cf38505a7b737cd7d78bd14eed4cd8c9ed1f4dbae184208e6187eb48075c2ac2b9247

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SGqd:BemTLkNdfE0pZrwI

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      5e2739e6238d076770b5f343abf4c7d81d9d1d9a61edf7aa033e72ed36c03744

    • Size

      1.8MB

    • MD5

      291c1e6bf297e93c46c146f85f89f581

    • SHA1

      8a53fdf3417e4c213315a6674e1a773d26844043

    • SHA256

      5e2739e6238d076770b5f343abf4c7d81d9d1d9a61edf7aa033e72ed36c03744

    • SHA512

      9d99664d0e60300af8a4ca6fbe7c638a6626f8e7bf17456f44979c9f832cf38505a7b737cd7d78bd14eed4cd8c9ed1f4dbae184208e6187eb48075c2ac2b9247

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SGqd:BemTLkNdfE0pZrwI

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks