kpot

General

Target

a04f5e58cc67bff166ac4d3bc3b697e0N.exe
Size

1.9MB
Sample

240901-v8bafsxgqb
MD5

a04f5e58cc67bff166ac4d3bc3b697e0
SHA1

e4ff7291ce0c886129198a337f7a31ec60d4bba1
SHA256

3984f667b0b4aab596004f31dd15787151cd562e46d98993716ade0f5ba0a937
SHA512

c12c4d3a0660622bdcb4ed49288f9cc44e3ab9c433794c86196a412de545a82d3130e7f3bf7af378a13c4484e8324c870535391bcdee48d06d21317d68b45453
SSDEEP

49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdmcz:oemTLkNdfE0pZrws

Score

10^/10

Malware Config

Targets

- Target
  
  a04f5e58cc67bff166ac4d3bc3b697e0N.exe
- Size
  
  1.9MB
- MD5
  
  a04f5e58cc67bff166ac4d3bc3b697e0
- SHA1
  
  e4ff7291ce0c886129198a337f7a31ec60d4bba1
- SHA256
  
  3984f667b0b4aab596004f31dd15787151cd562e46d98993716ade0f5ba0a937
- SHA512
  
  c12c4d3a0660622bdcb4ed49288f9cc44e3ab9c433794c86196a412de545a82d3130e7f3bf7af378a13c4484e8324c870535391bcdee48d06d21317d68b45453
- SSDEEP
  
  49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdmcz:oemTLkNdfE0pZrws
Score

10^/10

kpot xmrig miner persistence privilege_escalation stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1546

Accessibility Features

1

T1546.008

Privilege Escalation

Event Triggered Execution

1

T1546

Accessibility Features

1

T1546.008

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

KPOT Core Executable

xmrig

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2