Overview

overview

10

Static

static

10

02d8e044cc...cs.exe

windows7-x64

10

02d8e044cc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02d8e044ccc3d478e56883b943443f90_NeikiAnalytics.exe

  • Size

    1.8MB

  • Sample

    240518-z2cxxsgc85

  • MD5

    02d8e044ccc3d478e56883b943443f90

  • SHA1

    36314ca5a57cff12e15e56eec4fb0720e603c257

  • SHA256

    ceb5e94816e6d24a6a45e682b7f5a82f55263e907eb11e5d4c6c9a243d2e9790

  • SHA512

    8557927d9b9e10512b24ee90f1af35ffc5550729dd5e7bb9ab053070285ec3ed072544e69e7476afe5f1ba0a6d4050678db3c95a718b0a6308b5efee4af05971

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6Stnt:BemTLkNdfE0pZrwS

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      02d8e044ccc3d478e56883b943443f90_NeikiAnalytics.exe

    • Size

      1.8MB

    • MD5

      02d8e044ccc3d478e56883b943443f90

    • SHA1

      36314ca5a57cff12e15e56eec4fb0720e603c257

    • SHA256

      ceb5e94816e6d24a6a45e682b7f5a82f55263e907eb11e5d4c6c9a243d2e9790

    • SHA512

      8557927d9b9e10512b24ee90f1af35ffc5550729dd5e7bb9ab053070285ec3ed072544e69e7476afe5f1ba0a6d4050678db3c95a718b0a6308b5efee4af05971

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6Stnt:BemTLkNdfE0pZrwS

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks