Overview

overview

10

Static

static

10

72cd2aaa4c...0N.exe

windows7-x64

10

72cd2aaa4c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72cd2aaa4c5841d504ca56768d601ff0N.exe

  • Size

    1.9MB

  • Sample

    240901-zr6r9ascjf

  • MD5

    72cd2aaa4c5841d504ca56768d601ff0

  • SHA1

    b3f30a9d5213144d6fd85613a27a904d2ccac486

  • SHA256

    40f60bd9b6a36fd20dff8d724892d17f3e76a2cc9956fd8c5a005b8a65c73de9

  • SHA512

    783807cbd14c51bd56ff0ea3010ca7c5f3898b2e3e3c8faafd3c9d5627c8edaf05fbf432106b723684efab92f80a9b30a8b2196313c286c77b781394e7dcd5c4

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdsx:oemTLkNdfE0pZrwf

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      72cd2aaa4c5841d504ca56768d601ff0N.exe

    • Size

      1.9MB

    • MD5

      72cd2aaa4c5841d504ca56768d601ff0

    • SHA1

      b3f30a9d5213144d6fd85613a27a904d2ccac486

    • SHA256

      40f60bd9b6a36fd20dff8d724892d17f3e76a2cc9956fd8c5a005b8a65c73de9

    • SHA512

      783807cbd14c51bd56ff0ea3010ca7c5f3898b2e3e3c8faafd3c9d5627c8edaf05fbf432106b723684efab92f80a9b30a8b2196313c286c77b781394e7dcd5c4

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdsx:oemTLkNdfE0pZrwf

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks