General

  • Target

    e124f1c7a4081f4e4f7aff40ecd915e0_NeikiAnalytics

  • Size

    1.6MB

  • MD5

    e124f1c7a4081f4e4f7aff40ecd915e0

  • SHA1

    025501f983e9dbd5314bae9c0c54cf2913cb611c

  • SHA256

    3eaf8e52694fd50a35deef97bc2ee22784cb93e71ac4dbcd98889389b1a449ef

  • SHA512

    924620ac9756f3f62afec7e968131ac5d86a02b95efe614aecffb96888c13f0f85ef1c961f0d36fdc400595b75073b0109037016ae89bd64c7f42581217310b4

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX677WOMc7qzz1IUN9pnvDrkS/ix:ROdWCCi7/raZ5aIwC+Agr6tc3hDNix

Score
10/10

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e124f1c7a4081f4e4f7aff40ecd915e0_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections