Overview

overview

10

Static

static

10

b677d4ac4e...3N.exe

windows7-x64

10

b677d4ac4e...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b677d4ac4e2d4b5e1c447478ae0d9aa10f3f5206dc8d84f7932f216d426945a3N

  • Size

    1.7MB

  • Sample

    240919-dd4j3sxenr

  • MD5

    07c7faf2ee2ae8bab6009e75b51f6820

  • SHA1

    6710e882ee50d80fbc59c154d9f747e66798d963

  • SHA256

    b677d4ac4e2d4b5e1c447478ae0d9aa10f3f5206dc8d84f7932f216d426945a3

  • SHA512

    5a09e283939819d8b53e97a75c2798c1a2ee6e8308fff783d300de74fbdeccb09bff754f62040e05a3ba7967b74788c3554665cf4c4e08f3899f01de3fbacf29

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWgdz:RWWBibyr

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      b677d4ac4e2d4b5e1c447478ae0d9aa10f3f5206dc8d84f7932f216d426945a3N

    • Size

      1.7MB

    • MD5

      07c7faf2ee2ae8bab6009e75b51f6820

    • SHA1

      6710e882ee50d80fbc59c154d9f747e66798d963

    • SHA256

      b677d4ac4e2d4b5e1c447478ae0d9aa10f3f5206dc8d84f7932f216d426945a3

    • SHA512

      5a09e283939819d8b53e97a75c2798c1a2ee6e8308fff783d300de74fbdeccb09bff754f62040e05a3ba7967b74788c3554665cf4c4e08f3899f01de3fbacf29

    • SSDEEP

      49152:ROdWCCi7/raZ5aIwC+Agr6St1lOqq+jCpLWgdz:RWWBibyr

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks