Overview

overview

10

Static

static

10

11a3d4ea4c...0N.exe

windows7-x64

10

11a3d4ea4c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11a3d4ea4c48b1e0558c5c3468f14f00N.exe

  • Size

    1.9MB

  • Sample

    240831-pn5qnstbnq

  • MD5

    11a3d4ea4c48b1e0558c5c3468f14f00

  • SHA1

    c720b51ac5e1de9a6bc8382ced50a06761240ba4

  • SHA256

    2e7f61f58a812a8a0ff2e9f56badb24d4d273651aa8b6be2db6164a9e6cd5a97

  • SHA512

    c4f2b0cb7290999ef0b711505619aaee65c5e9c745719caea668d58490e6ba59120ef16a6a50bae99f5911fb45c3b4a2e713d4d7d234ab0d460bdf144c28d981

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJd1:oemTLkNdfE0pZrwk

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      11a3d4ea4c48b1e0558c5c3468f14f00N.exe

    • Size

      1.9MB

    • MD5

      11a3d4ea4c48b1e0558c5c3468f14f00

    • SHA1

      c720b51ac5e1de9a6bc8382ced50a06761240ba4

    • SHA256

      2e7f61f58a812a8a0ff2e9f56badb24d4d273651aa8b6be2db6164a9e6cd5a97

    • SHA512

      c4f2b0cb7290999ef0b711505619aaee65c5e9c745719caea668d58490e6ba59120ef16a6a50bae99f5911fb45c3b4a2e713d4d7d234ab0d460bdf144c28d981

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJd1:oemTLkNdfE0pZrwk

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks