Overview

overview

10

Static

static

10

04d859e598...cs.exe

windows7-x64

10

04d859e598...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04d859e5981c7812099e081a1b96bf10_NeikiAnalytics.exe

  • Size

    1.7MB

  • Sample

    240521-x1flbafg2v

  • MD5

    04d859e5981c7812099e081a1b96bf10

  • SHA1

    187608a99f64147d0079b2dca1441dfdd449dee1

  • SHA256

    7574572e3389a013c9aef8d63f25c1aa71670d1d52d317015f56884589a9d793

  • SHA512

    e1821735249802d19dd09cf73d17fc78546c3ff7a1738edc20d4ed3c9d22174f7b8ce18feb538b607c6861b1ebc9bfc3a15083fb65c12ac5badaa4055e82388d

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupQF4g6FReQwUzN6Rf04Sf:Lz071uv4BPMki8CnfZFOz4u

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      04d859e5981c7812099e081a1b96bf10_NeikiAnalytics.exe

    • Size

      1.7MB

    • MD5

      04d859e5981c7812099e081a1b96bf10

    • SHA1

      187608a99f64147d0079b2dca1441dfdd449dee1

    • SHA256

      7574572e3389a013c9aef8d63f25c1aa71670d1d52d317015f56884589a9d793

    • SHA512

      e1821735249802d19dd09cf73d17fc78546c3ff7a1738edc20d4ed3c9d22174f7b8ce18feb538b607c6861b1ebc9bfc3a15083fb65c12ac5badaa4055e82388d

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupQF4g6FReQwUzN6Rf04Sf:Lz071uv4BPMki8CnfZFOz4u

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks