General

  • Target

    0057e7c879e3db11d84dc493620f4c40N

  • Size

    1.6MB

  • Sample

    240910-skd1bs1emd

  • MD5

    0057e7c879e3db11d84dc493620f4c40

  • SHA1

    028b69bc10fd06f5639b2deeb9aa53b6c636c9ac

  • SHA256

    e3ccedcf90f75f601c9190b527d3d8a15926b01988d39649e3a85618442500de

  • SHA512

    9c8bdafa94f6acde7ce1794a701b2fb84eb11ed664bc004c4c8ad37e34d047f6635d79ea178ca9153474411e25e6b895a65e7ca1ffc2640e5bd70186b971b85b

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6StVEnmcKxYKKID:RWWBibyy

Malware Config

Targets

    • Target

      0057e7c879e3db11d84dc493620f4c40N

    • Size

      1.6MB

    • MD5

      0057e7c879e3db11d84dc493620f4c40

    • SHA1

      028b69bc10fd06f5639b2deeb9aa53b6c636c9ac

    • SHA256

      e3ccedcf90f75f601c9190b527d3d8a15926b01988d39649e3a85618442500de

    • SHA512

      9c8bdafa94f6acde7ce1794a701b2fb84eb11ed664bc004c4c8ad37e34d047f6635d79ea178ca9153474411e25e6b895a65e7ca1ffc2640e5bd70186b971b85b

    • SSDEEP

      49152:ROdWCCi7/raZ5aIwC+Agr6StVEnmcKxYKKID:RWWBibyy

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks