Overview

overview

10

Static

static

10

72fd42f47a...KI.exe

windows7-x64

10

72fd42f47a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    72fd42f47a8b44c82069d879fef89e20_NEIKI

  • Size

    1.4MB

  • Sample

    240508-aexldafh2s

  • MD5

    72fd42f47a8b44c82069d879fef89e20

  • SHA1

    1019d8d26b7570c8eb4b2148d9981b36284c2380

  • SHA256

    b3203f1e7ab13e1b17b2822597754ac2e1c7e50729cf8bbb6775e07d9d5f09a7

  • SHA512

    c41718eef1c3a1d6e3ea5902d07138060d952a25122b37351c237c4e37a6bb7a0bda35cffc92f4ab2e930511de844c5cee45ca7ab1dc3529eb5bb489a6faac0a

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsi0JT/kWi5ln71+rY:ROdWCCi7/rahlqOdgWqnz

Score
10/10
xmrigminerpersistenceupx

Malware Config

Targets

    • Target

      72fd42f47a8b44c82069d879fef89e20_NEIKI

    • Size

      1.4MB

    • MD5

      72fd42f47a8b44c82069d879fef89e20

    • SHA1

      1019d8d26b7570c8eb4b2148d9981b36284c2380

    • SHA256

      b3203f1e7ab13e1b17b2822597754ac2e1c7e50729cf8bbb6775e07d9d5f09a7

    • SHA512

      c41718eef1c3a1d6e3ea5902d07138060d952a25122b37351c237c4e37a6bb7a0bda35cffc92f4ab2e930511de844c5cee45ca7ab1dc3529eb5bb489a6faac0a

    • SSDEEP

      24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsi0JT/kWi5ln71+rY:ROdWCCi7/rahlqOdgWqnz

    Score
    10/10
    xmrigminerupxpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks