Overview

overview

10

Static

static

10

0b3413bd0d...7N.exe

windows7-x64

10

0b3413bd0d...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b3413bd0d6e88165899e194ca054e41585b98fbf32e8de479d62ca5facb33c7N

  • Size

    1.7MB

  • Sample

    240926-x5cefsxbje

  • MD5

    17d78e332d568980a2fbbc43f05b3fa0

  • SHA1

    5f4d39ea1acc217fffffd48fdd61269ea50e7695

  • SHA256

    0b3413bd0d6e88165899e194ca054e41585b98fbf32e8de479d62ca5facb33c7

  • SHA512

    10b609330b464cccd854f9008959f679e1e162507e37f232236fc710c23eab943866561a57fd9b34054469472487020608662db54aa6df378e85491e2dddf4cf

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fati:GemTLkNdfE0pZaQq

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      0b3413bd0d6e88165899e194ca054e41585b98fbf32e8de479d62ca5facb33c7N

    • Size

      1.7MB

    • MD5

      17d78e332d568980a2fbbc43f05b3fa0

    • SHA1

      5f4d39ea1acc217fffffd48fdd61269ea50e7695

    • SHA256

      0b3413bd0d6e88165899e194ca054e41585b98fbf32e8de479d62ca5facb33c7

    • SHA512

      10b609330b464cccd854f9008959f679e1e162507e37f232236fc710c23eab943866561a57fd9b34054469472487020608662db54aa6df378e85491e2dddf4cf

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fati:GemTLkNdfE0pZaQq

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks