Overview

overview

10

Static

static

10

d7601dc1ca...0N.exe

windows7-x64

10

d7601dc1ca...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7601dc1ca94409e12d28b63e634acf0N.exe

  • Size

    1.9MB

  • Sample

    240902-hjdytsvhqc

  • MD5

    d7601dc1ca94409e12d28b63e634acf0

  • SHA1

    b0525875052b6378f5e02e781a3452ec4b6b0380

  • SHA256

    ee2396c1638b6a77f4432195597ec3fe86f6220d1e02b09a210db4f244ef4303

  • SHA512

    3cf7f9023293af20f9ffb69299e7f323fbf9b6b8841e6e6eb9c93691c4bdb3fe3034e52a4623a3747a4c114ee469706b461152e16fcccaabe0e72ca593daa73b

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdsf:oemTLkNdfE0pZrwL

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      d7601dc1ca94409e12d28b63e634acf0N.exe

    • Size

      1.9MB

    • MD5

      d7601dc1ca94409e12d28b63e634acf0

    • SHA1

      b0525875052b6378f5e02e781a3452ec4b6b0380

    • SHA256

      ee2396c1638b6a77f4432195597ec3fe86f6220d1e02b09a210db4f244ef4303

    • SHA512

      3cf7f9023293af20f9ffb69299e7f323fbf9b6b8841e6e6eb9c93691c4bdb3fe3034e52a4623a3747a4c114ee469706b461152e16fcccaabe0e72ca593daa73b

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6S/FpJdsf:oemTLkNdfE0pZrwL

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks