kpot | cf59630afa019453175e9061a07b9d25005186736f93166d9772ef11bfd4d44d | Triage

Submit
Reports

Overview

overview

Static

static

3

edb01d24d0...18.exe

windows7-x64

edb01d24d0...18.exe

windows10-2004-x64

Sharing

General

Target

edb01d24d09dd9112151e221f7f5e725_JaffaCakes118
Size

256KB
Sample

240920-qrdl2aydpb
MD5

edb01d24d09dd9112151e221f7f5e725
SHA1

8fab94ab911bbdd76f190292f00aedb5aeea4963
SHA256

cf59630afa019453175e9061a07b9d25005186736f93166d9772ef11bfd4d44d
SHA512

f98e96feabbdc505377ff5f2863afef4e50f4e409c41922bffe7d73ff23c2a10a64861e19e619c5c410d696294101b1c100f0b6c60e5adaf2ce5dc26e8c6fdb9
SSDEEP

3072:WJ1iGx1MczDZ6ENfm0aOaQgmDJKkFRqlmFYW7fcloPu6pjqzVa:pG/MoZ6E40WQgo9FRqeclo2MuzV

Score

10^/10

kpot discovery stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

edb01d24d09dd9112151e221f7f5e725_JaffaCakes118.exe

Resource

win7-20240903-en

kpot discovery stealer trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

edb01d24d09dd9112151e221f7f5e725_JaffaCakes118.exe

Resource

win10v2004-20240802-en

kpot discovery stealer trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  edb01d24d09dd9112151e221f7f5e725_JaffaCakes118
- Size
  
  256KB
- MD5
  
  edb01d24d09dd9112151e221f7f5e725
- SHA1
  
  8fab94ab911bbdd76f190292f00aedb5aeea4963
- SHA256
  
  cf59630afa019453175e9061a07b9d25005186736f93166d9772ef11bfd4d44d
- SHA512
  
  f98e96feabbdc505377ff5f2863afef4e50f4e409c41922bffe7d73ff23c2a10a64861e19e619c5c410d696294101b1c100f0b6c60e5adaf2ce5dc26e8c6fdb9
- SSDEEP
  
  3072:WJ1iGx1MczDZ6ENfm0aOaQgmDJKkFRqlmFYW7fcloPu6pjqzVa:pG/MoZ6E40WQgo9FRqeclo2MuzV
Score

10^/10

kpot discovery stealer trojan
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

kpotdiscoverystealertrojan

behavioral2

kpotdiscoverystealertrojan

© 2018-2024

Terms | Privacy