Overview

overview

10

Static

static

10

4734c0a9eb...cs.exe

windows7-x64

10

4734c0a9eb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4734c0a9eb2772b527031de553554550_NeikiAnalytics.exe

  • Size

    1.1MB

  • Sample

    240519-113ydscf6x

  • MD5

    4734c0a9eb2772b527031de553554550

  • SHA1

    7ce834104b1d61a14b7be9345e1e1b7630c171bc

  • SHA256

    5e644560fd7fdd8e48232b56a453e6399cbd6fcd3bd9e2ca4b5ad080b65acae9

  • SHA512

    d24154242aea538ef9996670d69d0f406ff3101f34172580d11b8007e30b5846419aef62b7f107d4acde103de0f5a3c45295d612de14e7c83253006f7d4ebae4

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQt+4En+bcMHI+rMUx+N43IAkPb:E5aIwC+Agr6StVEnmcI+2IAY

Score
10/10
kpottrickbotbankerevasionexecutionstealertrojan

Malware Config

Targets

    • Target

      4734c0a9eb2772b527031de553554550_NeikiAnalytics.exe

    • Size

      1.1MB

    • MD5

      4734c0a9eb2772b527031de553554550

    • SHA1

      7ce834104b1d61a14b7be9345e1e1b7630c171bc

    • SHA256

      5e644560fd7fdd8e48232b56a453e6399cbd6fcd3bd9e2ca4b5ad080b65acae9

    • SHA512

      d24154242aea538ef9996670d69d0f406ff3101f34172580d11b8007e30b5846419aef62b7f107d4acde103de0f5a3c45295d612de14e7c83253006f7d4ebae4

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQt+4En+bcMHI+rMUx+N43IAkPb:E5aIwC+Agr6StVEnmcI+2IAY

    Score
    10/10
    kpottrickbotbankerevasionexecutionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks