General

  • Target

    bc21921f7c93da9bc7d176408b74b21769b636c835804bdfc9f508d48341b9e1

  • Size

    1.9MB

  • Sample

    250209-fbxd4avrgv

  • MD5

    879e4bfa46c5327a7973207087b01bdc

  • SHA1

    85ce93bd5d3e2d4a13c1004d7fc65d509c5bc478

  • SHA256

    bc21921f7c93da9bc7d176408b74b21769b636c835804bdfc9f508d48341b9e1

  • SHA512

    15c3ba88979f27c0caaf7e19757c4b76d4180f941c4039838c2016550780c9c7627fde3ca9cff8a4640b5c70ae14646ee82a2b7c4dc65be4eabd3dcbf3fe7967

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fatb7zI4:GemTLkNdfE0pZaQb

Malware Config

Targets

    • Target

      bc21921f7c93da9bc7d176408b74b21769b636c835804bdfc9f508d48341b9e1

    • Size

      1.9MB

    • MD5

      879e4bfa46c5327a7973207087b01bdc

    • SHA1

      85ce93bd5d3e2d4a13c1004d7fc65d509c5bc478

    • SHA256

      bc21921f7c93da9bc7d176408b74b21769b636c835804bdfc9f508d48341b9e1

    • SHA512

      15c3ba88979f27c0caaf7e19757c4b76d4180f941c4039838c2016550780c9c7627fde3ca9cff8a4640b5c70ae14646ee82a2b7c4dc65be4eabd3dcbf3fe7967

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fatb7zI4:GemTLkNdfE0pZaQb

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • Kpot family

    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks