Overview

overview

10

Static

static

10

7ea5a96504...89.exe

windows7-x64

10

7ea5a96504...89.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ea5a96504ce4c3978533f87449cb986af1685976a18d900e753a8b4dec3f089

  • Size

    1.7MB

  • Sample

    240920-zwjhhsxgpf

  • MD5

    d5fa0107f447cdbf8dd42e3d6d265b72

  • SHA1

    fcb0ddc95aa04af70e04d530649b32632767af3c

  • SHA256

    7ea5a96504ce4c3978533f87449cb986af1685976a18d900e753a8b4dec3f089

  • SHA512

    8fad6e98726f0f5f611c0775bb023cca9c3d76dbddeefaa2c6d09fe34e14bcb6d0135bc94e5036accc6d5414ae8ec7c85dfd7e439d750a89db56a85ec6972c07

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fat2:GemTLkNdfE0pZaQO

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      7ea5a96504ce4c3978533f87449cb986af1685976a18d900e753a8b4dec3f089

    • Size

      1.7MB

    • MD5

      d5fa0107f447cdbf8dd42e3d6d265b72

    • SHA1

      fcb0ddc95aa04af70e04d530649b32632767af3c

    • SHA256

      7ea5a96504ce4c3978533f87449cb986af1685976a18d900e753a8b4dec3f089

    • SHA512

      8fad6e98726f0f5f611c0775bb023cca9c3d76dbddeefaa2c6d09fe34e14bcb6d0135bc94e5036accc6d5414ae8ec7c85dfd7e439d750a89db56a85ec6972c07

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fat2:GemTLkNdfE0pZaQO

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks