General

  • Target

    735296d4c0eff1f38534e3830b5192e0_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240519-e36amsad6t

  • MD5

    735296d4c0eff1f38534e3830b5192e0

  • SHA1

    462e5a2683f427832166871d6eccb723bfcfbdda

  • SHA256

    3a1bbbfb43458c4d9c5a8fd481649724202c7659584dd7159e226145a72b8f61

  • SHA512

    2302ac5d03919e96ea0fce86d24f647ae8b284f7279159ea449c82accd6f1bac1a20f2ac54be8a1f9765475ef7d44b74472f998e10ab13732287f47d41f9bf5b

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSM6UzT:ROdWCCi7/raZ5aIwC+Agr6SNvv

Malware Config

Targets

    • Target

      735296d4c0eff1f38534e3830b5192e0_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      735296d4c0eff1f38534e3830b5192e0

    • SHA1

      462e5a2683f427832166871d6eccb723bfcfbdda

    • SHA256

      3a1bbbfb43458c4d9c5a8fd481649724202c7659584dd7159e226145a72b8f61

    • SHA512

      2302ac5d03919e96ea0fce86d24f647ae8b284f7279159ea449c82accd6f1bac1a20f2ac54be8a1f9765475ef7d44b74472f998e10ab13732287f47d41f9bf5b

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSM6UzT:ROdWCCi7/raZ5aIwC+Agr6SNvv

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks