Resubmissions

25/09/2025, 14:35

250925-ryb78azwez10

23/04/2020, 18:40

200423-3vsmw35kej8

General

  • Target
    kpo.exe
  • Size 1.6MB
  • Sample250925-ryb78azwez
  • SHA256 e1c2513c906bb4f53b2ea2ec8fc675000e5a49daa84c35a2963c63148187a25e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      kpo.exe
    • Size 1.6MB
    • SHA256 e1c2513c906bb4f53b2ea2ec8fc675000e5a49daa84c35a2963c63148187a25e
    • MD5 SHA1 SHA512 SSDEEP
    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • Kpot family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks