Overview

overview

10

Static

static

10

33f6709f3c...b3.exe

windows7-x64

10

33f6709f3c...b3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33f6709f3cf30cdfe05615a4ae75d491a3649a50e34a21bed86c3ffcf498c2b3

  • Size

    1.7MB

  • Sample

    240817-zgynwsycqn

  • MD5

    a9c7688443c24cc4c42f1474e29944ef

  • SHA1

    89a1b6c3b7292f0088689dd582082c2d37fc53f6

  • SHA256

    33f6709f3cf30cdfe05615a4ae75d491a3649a50e34a21bed86c3ffcf498c2b3

  • SHA512

    9c409bf367b28ea4196c6e2a325b15ebb978403e03cc556e0f4191423bce55f5eec9d398d3bb6ba9d159b2a93af5186e9513ea02a591c26d248f4e5d694cbdc1

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FatR1:GemTLkNdfE0pZaQr

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      33f6709f3cf30cdfe05615a4ae75d491a3649a50e34a21bed86c3ffcf498c2b3

    • Size

      1.7MB

    • MD5

      a9c7688443c24cc4c42f1474e29944ef

    • SHA1

      89a1b6c3b7292f0088689dd582082c2d37fc53f6

    • SHA256

      33f6709f3cf30cdfe05615a4ae75d491a3649a50e34a21bed86c3ffcf498c2b3

    • SHA512

      9c409bf367b28ea4196c6e2a325b15ebb978403e03cc556e0f4191423bce55f5eec9d398d3bb6ba9d159b2a93af5186e9513ea02a591c26d248f4e5d694cbdc1

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FatR1:GemTLkNdfE0pZaQr

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks