Overview

overview

10

Static

static

10

6cd817fb41...0N.exe

windows7-x64

10

6cd817fb41...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6cd817fb41e36bc52894eed0202c5ae0N.exe

  • Size

    1.7MB

  • Sample

    240825-c117ssvajr

  • MD5

    6cd817fb41e36bc52894eed0202c5ae0

  • SHA1

    2c8b7f09214aa5bf2a986b8608bbc828db9ac2df

  • SHA256

    d9e85d72351dd83996cb9f22912e62def03595f5932cd14883d320f417cfa77e

  • SHA512

    6f96fa6f02f98fe3b382f54a16b011159ec440b1db06bd9374a5380ad93b38d928e506103e8b8696c1c8dc5ebd076b78e43d177de6dc167624b11f8d0675c14d

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWrL:RWWBibyg

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      6cd817fb41e36bc52894eed0202c5ae0N.exe

    • Size

      1.7MB

    • MD5

      6cd817fb41e36bc52894eed0202c5ae0

    • SHA1

      2c8b7f09214aa5bf2a986b8608bbc828db9ac2df

    • SHA256

      d9e85d72351dd83996cb9f22912e62def03595f5932cd14883d320f417cfa77e

    • SHA512

      6f96fa6f02f98fe3b382f54a16b011159ec440b1db06bd9374a5380ad93b38d928e506103e8b8696c1c8dc5ebd076b78e43d177de6dc167624b11f8d0675c14d

    • SSDEEP

      49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWrL:RWWBibyg

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks