Overview

overview

10

Static

static

10

c27432873c...cs.exe

windows7-x64

10

c27432873c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c27432873cc77685f7fb182106466e40_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240519-p3vt1shh2s

  • MD5

    c27432873cc77685f7fb182106466e40

  • SHA1

    1c0089bce03c2cbd439546840eff8277425c31ad

  • SHA256

    b32bbe924649f5dac2fbf5fa338ddf9eb0c464fe371a64fe06fe77d230a62392

  • SHA512

    51303fc02bf934561d3edce2c2a9991c856f9d2c955ae028ec6f9661c4556d6eb7ce8b10f35aba9b1f46dc22e34067471bd55a64e5e1907e481d6fd11f4531eb

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNB:oemTLkNdfE0pZrwW

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      c27432873cc77685f7fb182106466e40_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      c27432873cc77685f7fb182106466e40

    • SHA1

      1c0089bce03c2cbd439546840eff8277425c31ad

    • SHA256

      b32bbe924649f5dac2fbf5fa338ddf9eb0c464fe371a64fe06fe77d230a62392

    • SHA512

      51303fc02bf934561d3edce2c2a9991c856f9d2c955ae028ec6f9661c4556d6eb7ce8b10f35aba9b1f46dc22e34067471bd55a64e5e1907e481d6fd11f4531eb

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNB:oemTLkNdfE0pZrwW

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks