Overview

overview

10

Static

static

10

e64948a284...2a.exe

windows7-x64

10

e64948a284...2a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e64948a28444186e1e1af21106ce7c8d81740e71d5c65286e77ce3fafbc53a2a

  • Size

    2.0MB

  • Sample

    250226-j7dhms1ly9

  • MD5

    2392a9eb4ba9251b52f2aa020a72b6c5

  • SHA1

    16e8eea758239ffc255e67ae6747031739fae270

  • SHA256

    e64948a28444186e1e1af21106ce7c8d81740e71d5c65286e77ce3fafbc53a2a

  • SHA512

    6cebae566e3e1c6538d417fc2808c89fd3b6193b5db2854287a7d82686de2a2c2d2d0162d97b61d090291e606a337354599fd74e3fc35ae52f4633d6d60abcc1

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fatb7zIgZ:GemTLkNdfE0pZaQf

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      e64948a28444186e1e1af21106ce7c8d81740e71d5c65286e77ce3fafbc53a2a

    • Size

      2.0MB

    • MD5

      2392a9eb4ba9251b52f2aa020a72b6c5

    • SHA1

      16e8eea758239ffc255e67ae6747031739fae270

    • SHA256

      e64948a28444186e1e1af21106ce7c8d81740e71d5c65286e77ce3fafbc53a2a

    • SHA512

      6cebae566e3e1c6538d417fc2808c89fd3b6193b5db2854287a7d82686de2a2c2d2d0162d97b61d090291e606a337354599fd74e3fc35ae52f4633d6d60abcc1

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fatb7zIgZ:GemTLkNdfE0pZaQf

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Kpot family

      kpot

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks