Overview

overview

10

Static

static

10

ce7e2011b6...cs.exe

windows7-x64

10

ce7e2011b6...cs.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce7e2011b61c98c55046bad58dc25b60_NeikiAnalytics.exe

  • Size

    2.4MB

  • Sample

    240518-qs85bsdh27

  • MD5

    ce7e2011b61c98c55046bad58dc25b60

  • SHA1

    2f43923a90b7c6a9c1317523e8e3685d5f100a4a

  • SHA256

    cd99ca1c13eccf9f1ed5fc7f6faa6a6abd75e9426c37c678edbb374addd96d0f

  • SHA512

    65c79d00fa7bb2cfdd361a95d860b547088a9be8fda285dfe6b36c397ac98e0d8c3929cc84fcaf63c3a448c5fc1558c60b9cbed7e027c13ceecb1d5f78ec4e04

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqq+jCpLPm:BemTLkNdfE0pZrwA

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      ce7e2011b61c98c55046bad58dc25b60_NeikiAnalytics.exe

    • Size

      2.4MB

    • MD5

      ce7e2011b61c98c55046bad58dc25b60

    • SHA1

      2f43923a90b7c6a9c1317523e8e3685d5f100a4a

    • SHA256

      cd99ca1c13eccf9f1ed5fc7f6faa6a6abd75e9426c37c678edbb374addd96d0f

    • SHA512

      65c79d00fa7bb2cfdd361a95d860b547088a9be8fda285dfe6b36c397ac98e0d8c3929cc84fcaf63c3a448c5fc1558c60b9cbed7e027c13ceecb1d5f78ec4e04

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqq+jCpLPm:BemTLkNdfE0pZrwA

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks