Overview

overview

10

Static

static

10

baca2fc43d...0N.exe

windows7-x64

10

baca2fc43d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    baca2fc43d9443fad6062ac3d7a0e140N.exe

  • Size

    2.1MB

  • Sample

    240901-a6a7fsvfkr

  • MD5

    baca2fc43d9443fad6062ac3d7a0e140

  • SHA1

    00ffe7b73b3ca1026c57cb6380f3317572c26400

  • SHA256

    239b34077114c9caf53adc9657662c408682448767463cf593ff16aa062b066c

  • SHA512

    8dbd4e3e9365ba0b539298b437b50bfc5ff69ae56c6d39a80b086ab33f509910479da37d34cd01c422028640e14c65d9b0aa1908ad5f7f279c6c5ee34650dc54

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2iVz:GemTLkNdfE0pZaQC

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      baca2fc43d9443fad6062ac3d7a0e140N.exe

    • Size

      2.1MB

    • MD5

      baca2fc43d9443fad6062ac3d7a0e140

    • SHA1

      00ffe7b73b3ca1026c57cb6380f3317572c26400

    • SHA256

      239b34077114c9caf53adc9657662c408682448767463cf593ff16aa062b066c

    • SHA512

      8dbd4e3e9365ba0b539298b437b50bfc5ff69ae56c6d39a80b086ab33f509910479da37d34cd01c422028640e14c65d9b0aa1908ad5f7f279c6c5ee34650dc54

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2iVz:GemTLkNdfE0pZaQC

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks