General

  • Target

    227470060d9247ec4a8c87df981dc35912308f40837388f25c62dd15f674940f

  • Size

    2.0MB

  • Sample

    250226-zklhqssvgv

  • MD5

    2a7c7cd380ec427cec1b53448812ee32

  • SHA1

    02404982a7172b65018edba7d458c478b89f99e4

  • SHA256

    227470060d9247ec4a8c87df981dc35912308f40837388f25c62dd15f674940f

  • SHA512

    6881451f8f0bb10bac84e84c1a9cab3bb93e99cc726cf78167d53623599336b487c0e3b7f3069bddccf1d15d9fd599039148dbfd13eab07f61c2d3ade4a246ee

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fatb7zIgK:GemTLkNdfE0pZaQw

Malware Config

Targets

    • Target

      227470060d9247ec4a8c87df981dc35912308f40837388f25c62dd15f674940f

    • Size

      2.0MB

    • MD5

      2a7c7cd380ec427cec1b53448812ee32

    • SHA1

      02404982a7172b65018edba7d458c478b89f99e4

    • SHA256

      227470060d9247ec4a8c87df981dc35912308f40837388f25c62dd15f674940f

    • SHA512

      6881451f8f0bb10bac84e84c1a9cab3bb93e99cc726cf78167d53623599336b487c0e3b7f3069bddccf1d15d9fd599039148dbfd13eab07f61c2d3ade4a246ee

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fatb7zIgK:GemTLkNdfE0pZaQw

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • Kpot family

    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks