Overview

overview

10

Static

static

10

3cf5848c4c...cs.exe

windows7-x64

10

3cf5848c4c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3cf5848c4c25b27d11280b8a349ea1a0_NeikiAnalytics

  • Size

    1.6MB

  • Sample

    240509-qavh8adg67

  • MD5

    3cf5848c4c25b27d11280b8a349ea1a0

  • SHA1

    0bb0286762d1bc70b2c35571bb0990b3364aa10e

  • SHA256

    82ac6f28a1de7a8f0c92a53cc3e0b3cf1bde6fd8ae7400360cc840c9a2be9a55

  • SHA512

    2787cc5e142df988b36148730f419b579bf426dcf3f70749bff612fc8bef030d45408b168e464d3d72031910cb840936ac4ff780e0bdf80274a06a0628118aba

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zD:Lz071uv4BPMkibTIA5lCx7kvRWa4pXYz

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      3cf5848c4c25b27d11280b8a349ea1a0_NeikiAnalytics

    • Size

      1.6MB

    • MD5

      3cf5848c4c25b27d11280b8a349ea1a0

    • SHA1

      0bb0286762d1bc70b2c35571bb0990b3364aa10e

    • SHA256

      82ac6f28a1de7a8f0c92a53cc3e0b3cf1bde6fd8ae7400360cc840c9a2be9a55

    • SHA512

      2787cc5e142df988b36148730f419b579bf426dcf3f70749bff612fc8bef030d45408b168e464d3d72031910cb840936ac4ff780e0bdf80274a06a0628118aba

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zD:Lz071uv4BPMkibTIA5lCx7kvRWa4pXYz

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks