kpot | 6f5e90a69ba1dc2c049215c6ae656888da1c49f126c07ce89473623292d3b687 | Triage

Submit
Reports

Overview

overview

Static

static

f8c1260381...0N.exe

windows7-x64

f8c1260381...0N.exe

windows10-2004-x64

Sharing

General

Target

f8c12603811e2e315c3d687c34733d60N
Size

1.7MB
Sample

240912-p3rscsvhqf
MD5

f8c12603811e2e315c3d687c34733d60
SHA1

76279ff75e7d3384f5e39cef0a65a54f9debc51c
SHA256

6f5e90a69ba1dc2c049215c6ae656888da1c49f126c07ce89473623292d3b687
SHA512

737998792c3de24eb4c08415e3348ef831df2f9dd3f8ba6ed0d48b652e2df2aadc1508a05a3b6dd1f3b522b0911e374692769d7ec2aa4c83854108a12f4c858f
SSDEEP

49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLW3:RWWBibyU

Score

10^/10

kpot xmrig discovery miner stealer trojan upx

Static task

static1

upx miner kpot xmrig

6 signatures

Behavioral task

behavioral1

Sample

f8c12603811e2e315c3d687c34733d60N.exe

Resource

win7-20240903-en

kpot xmrig miner stealer trojan upx

windows7-x64

10 signatures

120 seconds

Behavioral task

behavioral2

Sample

f8c12603811e2e315c3d687c34733d60N.exe

Resource

win10v2004-20240802-en

kpot xmrig discovery miner stealer trojan upx

windows10-2004-x64

10 signatures

120 seconds

Malware Config

Targets

- Target
  
  f8c12603811e2e315c3d687c34733d60N
- Size
  
  1.7MB
- MD5
  
  f8c12603811e2e315c3d687c34733d60
- SHA1
  
  76279ff75e7d3384f5e39cef0a65a54f9debc51c
- SHA256
  
  6f5e90a69ba1dc2c049215c6ae656888da1c49f126c07ce89473623292d3b687
- SHA512
  
  737998792c3de24eb4c08415e3348ef831df2f9dd3f8ba6ed0d48b652e2df2aadc1508a05a3b6dd1f3b522b0911e374692769d7ec2aa4c83854108a12f4c858f
- SSDEEP
  
  49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLW3:RWWBibyU
Score

10^/10

kpot xmrig miner stealer trojan upx discovery
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

upxminerkpotxmrig

behavioral1

kpotxmrigminerstealertrojanupx

behavioral2

kpotxmrigdiscoveryminerstealertrojanupx

© 2018-2024

Terms | Privacy