Overview

overview

10

Static

static

10

e4e38ebd4f...2N.exe

windows7-x64

10

e4e38ebd4f...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4e38ebd4fb4720dddca340c702780c70920b3aed4267714635bdcffdf779462N

  • Size

    1.6MB

  • Sample

    241001-mkn8eayfkd

  • MD5

    dd1e24c138ef4307ae468e5111fc82a0

  • SHA1

    1ac083162fc556ea17753dee5c913a6bed68dc4d

  • SHA256

    e4e38ebd4fb4720dddca340c702780c70920b3aed4267714635bdcffdf779462

  • SHA512

    5f26dfd25cf487d54eec9100fbac41560405f76bd67ada13edf532426498eceb315bde045350bb43ca70890e2fb37465420f4c174dc7a3588e066d240b4e72db

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6StVEnmcKxYKKI5p:RWWBibyS

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      e4e38ebd4fb4720dddca340c702780c70920b3aed4267714635bdcffdf779462N

    • Size

      1.6MB

    • MD5

      dd1e24c138ef4307ae468e5111fc82a0

    • SHA1

      1ac083162fc556ea17753dee5c913a6bed68dc4d

    • SHA256

      e4e38ebd4fb4720dddca340c702780c70920b3aed4267714635bdcffdf779462

    • SHA512

      5f26dfd25cf487d54eec9100fbac41560405f76bd67ada13edf532426498eceb315bde045350bb43ca70890e2fb37465420f4c174dc7a3588e066d240b4e72db

    • SSDEEP

      49152:ROdWCCi7/raZ5aIwC+Agr6StVEnmcKxYKKI5p:RWWBibyS

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks