General
- Target kpo.exe
- Size 1.6MB
- Sample250925-ryb78azwez
- SHA256 e1c2513c906bb4f53b2ea2ec8fc675000e5a49daa84c35a2963c63148187a25e
- MD5 9af3c840b969a99d911fa6c2c18dee14
- SHA1 6f207cf41a5733013a7184e5c75ebb98ba4fde37
- SHA512 ae2745b0dacc2920cb11c042230a9ac869909e307d24c4ad55d5b6ab11b0e1db5dadb705d4107fcd605cd9ae85b0f060aebecaab0f2bdbf54801de00ee8e0101
- SSDEEP 3072:umF+CQEG1lCSKPXlJBv9cBp85pgbQjqvQYHWkAjkSpqxwEhd3tz87ZZlN:Vi1lMypucvQjkVSpqxwEaF
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Malware Config
Targets
-
- Target kpo.exe
- Size 1.6MB
- SHA256 e1c2513c906bb4f53b2ea2ec8fc675000e5a49daa84c35a2963c63148187a25e
- MD5 9af3c840b969a99d911fa6c2c18dee14
- SHA1 6f207cf41a5733013a7184e5c75ebb98ba4fde37
- SHA512 ae2745b0dacc2920cb11c042230a9ac869909e307d24c4ad55d5b6ab11b0e1db5dadb705d4107fcd605cd9ae85b0f060aebecaab0f2bdbf54801de00ee8e0101
- SSDEEP 3072:umF+CQEG1lCSKPXlJBv9cBp85pgbQjqvQYHWkAjkSpqxwEhd3tz87ZZlN:Vi1lMypucvQjkVSpqxwEaF
- MD5 SHA1 SHA512 SSDEEP
-
KPOT Core Executable
-
Kpot family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext