Overview

overview

10

Static

static

10

532c99edff...de.exe

windows7-x64

10

532c99edff...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    532c99edffe63856ec7d51b8768c72706ee6ad3e03059400ec1b7c65a0c086de

  • Size

    2.0MB

  • Sample

    250123-ase89atjas

  • MD5

    f3cde86c7c8df730d7a4733c8ebd01b8

  • SHA1

    f3739437cabd5466f009b132801a97d117a1fbac

  • SHA256

    532c99edffe63856ec7d51b8768c72706ee6ad3e03059400ec1b7c65a0c086de

  • SHA512

    6d52196159eb9c9e459d00202f7770117b830098d36cd5498ab8df8a75208651074e1752a620351a14cd59ae3f64de5a589717be3b61873636fa3cb898e7ae82

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FattzdRjoei:GemTLkNdfE0pZaQS

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      532c99edffe63856ec7d51b8768c72706ee6ad3e03059400ec1b7c65a0c086de

    • Size

      2.0MB

    • MD5

      f3cde86c7c8df730d7a4733c8ebd01b8

    • SHA1

      f3739437cabd5466f009b132801a97d117a1fbac

    • SHA256

      532c99edffe63856ec7d51b8768c72706ee6ad3e03059400ec1b7c65a0c086de

    • SHA512

      6d52196159eb9c9e459d00202f7770117b830098d36cd5498ab8df8a75208651074e1752a620351a14cd59ae3f64de5a589717be3b61873636fa3cb898e7ae82

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FattzdRjoei:GemTLkNdfE0pZaQS

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Kpot family

      kpot

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks