Overview

overview

10

Static

static

10

1342f1d01e...1N.exe

windows7-x64

10

1342f1d01e...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1342f1d01e59b4368235df1355c55c93745b7c0530807d55548ff80b74c08171N

  • Size

    1.6MB

  • Sample

    240918-em82lasdrl

  • MD5

    a2ed866c903a507165e26f6240e22080

  • SHA1

    1849c5c8462ee4f9ab07cc082aa8480fc3fba9d9

  • SHA256

    1342f1d01e59b4368235df1355c55c93745b7c0530807d55548ff80b74c08171

  • SHA512

    b1bcdc13bd16d5d96e061af4f5d95d3fffa9d906645e6affb40daa56f008ffe843a8e213164c0bd219961b02c21dfb7c3a499b082a6ab4d073f67b1afd0b6bd9

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hlrZUaZngFm:ROdWCCi7/raZ5aIwC+Agr6StY9Co

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      1342f1d01e59b4368235df1355c55c93745b7c0530807d55548ff80b74c08171N

    • Size

      1.6MB

    • MD5

      a2ed866c903a507165e26f6240e22080

    • SHA1

      1849c5c8462ee4f9ab07cc082aa8480fc3fba9d9

    • SHA256

      1342f1d01e59b4368235df1355c55c93745b7c0530807d55548ff80b74c08171

    • SHA512

      b1bcdc13bd16d5d96e061af4f5d95d3fffa9d906645e6affb40daa56f008ffe843a8e213164c0bd219961b02c21dfb7c3a499b082a6ab4d073f67b1afd0b6bd9

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqex1hlrZUaZngFm:ROdWCCi7/raZ5aIwC+Agr6StY9Co

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks