kpot | 33b4e4b65ae7b7b59301fc222e4f1059f83536d9669e64a8b08c6cda22cd5e3b | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

33b4e4b65a...bN.exe

windows7-x64

33b4e4b65a...bN.exe

windows10-2004-x64

Sharing

General

Target

33b4e4b65ae7b7b59301fc222e4f1059f83536d9669e64a8b08c6cda22cd5e3bN
Size

1.4MB
Sample

241007-fgf93a1apa
MD5

bbda7593efc0586c9d56ec0e5533cc40
SHA1

b9824e529c71198fbe6814e95fd40c9dff497069
SHA256

33b4e4b65ae7b7b59301fc222e4f1059f83536d9669e64a8b08c6cda22cd5e3b
SHA512

da9a9092a9e6101aa13a6f7a9434d5f0fefac7ffee9945e253aa8c79eaa9bb6496284ac0e5ee410db6b9861e3b0c9a589c8d6f67a9e011d73142cda70cba5543
SSDEEP

24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+s8juCCR5:ROdWCCi7/raZ5aIwC+Agr6SNasrsFCS

Score

10^/10

kpot xmrig miner stealer trojan upx

Static task

static1

upx miner kpot xmrig

6 signatures

Behavioral task

behavioral1

Sample

33b4e4b65ae7b7b59301fc222e4f1059f83536d9669e64a8b08c6cda22cd5e3bN.exe

Resource

win7-20240704-en

kpot xmrig miner stealer trojan upx

windows7-x64

10 signatures

120 seconds

Behavioral task

behavioral2

Sample

33b4e4b65ae7b7b59301fc222e4f1059f83536d9669e64a8b08c6cda22cd5e3bN.exe

Resource

win10v2004-20240802-en

kpot xmrig miner stealer trojan upx

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  33b4e4b65ae7b7b59301fc222e4f1059f83536d9669e64a8b08c6cda22cd5e3bN
- Size
  
  1.4MB
- MD5
  
  bbda7593efc0586c9d56ec0e5533cc40
- SHA1
  
  b9824e529c71198fbe6814e95fd40c9dff497069
- SHA256
  
  33b4e4b65ae7b7b59301fc222e4f1059f83536d9669e64a8b08c6cda22cd5e3b
- SHA512
  
  da9a9092a9e6101aa13a6f7a9434d5f0fefac7ffee9945e253aa8c79eaa9bb6496284ac0e5ee410db6b9861e3b0c9a589c8d6f67a9e011d73142cda70cba5543
- SSDEEP
  
  24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+s8juCCR5:ROdWCCi7/raZ5aIwC+Agr6SNasrsFCS
Score

10^/10

kpot xmrig miner stealer trojan upx
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

upxminerkpotxmrig

behavioral1

kpotxmrigminerstealertrojanupx

behavioral2

kpotxmrigminerstealertrojanupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.