General

  • Target

    1ee099328e4685d539a2215fbb555c50N

  • Size

    2.2MB

  • Sample

    240912-pnw4javdrn

  • MD5

    1ee099328e4685d539a2215fbb555c50

  • SHA1

    90efcc5d0551dc5b8deff5c1430884cf2dbe5224

  • SHA256

    f5c116fbce89aba37026475dea41c9b65e2c50dab96c036385f391cd9b2131c5

  • SHA512

    e1ce04b500d17ae0b1dded78315a09a3b72eec2af057a42191a20af04eb10ce7e50d78af7dcb8ef88284c33cab02184131743cf1c60ff5e4e1e25066563790e9

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2IANWSZ:BemTLkNdfE0pZrwi

Malware Config

Targets

    • Target

      1ee099328e4685d539a2215fbb555c50N

    • Size

      2.2MB

    • MD5

      1ee099328e4685d539a2215fbb555c50

    • SHA1

      90efcc5d0551dc5b8deff5c1430884cf2dbe5224

    • SHA256

      f5c116fbce89aba37026475dea41c9b65e2c50dab96c036385f391cd9b2131c5

    • SHA512

      e1ce04b500d17ae0b1dded78315a09a3b72eec2af057a42191a20af04eb10ce7e50d78af7dcb8ef88284c33cab02184131743cf1c60ff5e4e1e25066563790e9

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2IANWSZ:BemTLkNdfE0pZrwi

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks