General

  • Target

    6dd7284c578d01a75770cfcf8011e4d0_NeikiAnalytics

  • Size

    2.1MB

  • Sample

    240516-blj5asdg65

  • MD5

    6dd7284c578d01a75770cfcf8011e4d0

  • SHA1

    ef939425ec29850467c42b93003af546095a3b62

  • SHA256

    3e8962808e1b2db78c0f365b233fc1dff51970909ba9781d1080f6927e9d356a

  • SHA512

    ed347c1819f2d871eccd05a6b0474e42f06979c67604d0723af6dd1975d6c7fff8a92f75bbf2764dbffcc4c8e6f5f292ca5816117515780e466ded2258e07a95

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTG4:NABd

Malware Config

Targets

    • Target

      6dd7284c578d01a75770cfcf8011e4d0_NeikiAnalytics

    • Size

      2.1MB

    • MD5

      6dd7284c578d01a75770cfcf8011e4d0

    • SHA1

      ef939425ec29850467c42b93003af546095a3b62

    • SHA256

      3e8962808e1b2db78c0f365b233fc1dff51970909ba9781d1080f6927e9d356a

    • SHA512

      ed347c1819f2d871eccd05a6b0474e42f06979c67604d0723af6dd1975d6c7fff8a92f75bbf2764dbffcc4c8e6f5f292ca5816117515780e466ded2258e07a95

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTG4:NABd

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks