kpot

General

Target

28136b05fba087543326e751f170aa0196af8ef9a7088457124a89c794a06b08
Size

2.0MB
Sample

250214-dyerfszqen
MD5

4201c1980cdb75c6c827097bc6d833f9
SHA1

d33721ca841a0b59a666a21e61d3b49357b8211b
SHA256

28136b05fba087543326e751f170aa0196af8ef9a7088457124a89c794a06b08
SHA512

f2731d2646f279e9e4ed3f4112a4303fde6efdbaab1c2dff8546d8c61d174ac5054ffba6787c1903dcf1a1a68031bb39bfc059411782a58a2a027897bb510ef1
SSDEEP

49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FattzdRjoeR:GemTLkNdfE0pZaQB

Score

10^/10

Malware Config

Targets

- Target
  
  28136b05fba087543326e751f170aa0196af8ef9a7088457124a89c794a06b08
- Size
  
  2.0MB
- MD5
  
  4201c1980cdb75c6c827097bc6d833f9
- SHA1
  
  d33721ca841a0b59a666a21e61d3b49357b8211b
- SHA256
  
  28136b05fba087543326e751f170aa0196af8ef9a7088457124a89c794a06b08
- SHA512
  
  f2731d2646f279e9e4ed3f4112a4303fde6efdbaab1c2dff8546d8c61d174ac5054ffba6787c1903dcf1a1a68031bb39bfc059411782a58a2a027897bb510ef1
- SSDEEP
  
  49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FattzdRjoeR:GemTLkNdfE0pZaQB
Score

10^/10

kpot xmrig miner stealer trojan discovery
- KPOT
  KPOT is an information stealer that steals user data and account credentials.
  trojan stealer kpot
- KPOT Core Executable
- Kpot family
  kpot
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

KPOT Core Executable

Kpot family

Xmrig family

xmrig

XMRig Miner payload

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2