Overview

overview

10

Static

static

10

5b5e07c72f...cs.exe

windows7-x64

10

5b5e07c72f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b5e07c72fc2aad40029e6f9db30ae80_NeikiAnalytics.exe

  • Size

    2.4MB

  • Sample

    240518-ag75wsad75

  • MD5

    5b5e07c72fc2aad40029e6f9db30ae80

  • SHA1

    6e90c0dfb7c7f6c1bb17b38e72724789204ac6fe

  • SHA256

    00aa27fd69b7dec83ee75c3e7f31886e8d877d51895628b7614202343f9473bb

  • SHA512

    f4a9f0846d69670d12890ded34cb32c75399b36c1c94575cdcda7d07036b74bc52393891ced3ed0501e254440ec21b5d8dbb4c4a58f909adf3ef8d7cea7ae7b2

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqq+jCpLPGv:BemTLkNdfE0pZrwA

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      5b5e07c72fc2aad40029e6f9db30ae80_NeikiAnalytics.exe

    • Size

      2.4MB

    • MD5

      5b5e07c72fc2aad40029e6f9db30ae80

    • SHA1

      6e90c0dfb7c7f6c1bb17b38e72724789204ac6fe

    • SHA256

      00aa27fd69b7dec83ee75c3e7f31886e8d877d51895628b7614202343f9473bb

    • SHA512

      f4a9f0846d69670d12890ded34cb32c75399b36c1c94575cdcda7d07036b74bc52393891ced3ed0501e254440ec21b5d8dbb4c4a58f909adf3ef8d7cea7ae7b2

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqq+jCpLPGv:BemTLkNdfE0pZrwA

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks