Overview

overview

10

Static

static

10

424f7c5251...cs.exe

windows7-x64

10

424f7c5251...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    424f7c5251f2be702c2529bef9235710_NeikiAnalytics.exe

  • Size

    1.1MB

  • Sample

    240522-1hs1gahg2t

  • MD5

    424f7c5251f2be702c2529bef9235710

  • SHA1

    677bc28d720c097d0eb6b9106c4ebfb43a2d41a3

  • SHA256

    01c89a1a7d1502649928187c608673988eaaba24b03da6498041b075395fda94

  • SHA512

    c2d41e3f2bd4140eb93ebbc45382837fd3739ecb4a5346c6b964128eb7357bcfea887f9e127a4090d7f9963624a5207597d385eb40298eb890c0dcc484a65cac

  • SSDEEP

    24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbBwlKenUT5Ja5ugsz7zcQOXqhb7/:GezaTF8FcNkNdfE0pZ9oztFwIHT5JaoH

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      424f7c5251f2be702c2529bef9235710_NeikiAnalytics.exe

    • Size

      1.1MB

    • MD5

      424f7c5251f2be702c2529bef9235710

    • SHA1

      677bc28d720c097d0eb6b9106c4ebfb43a2d41a3

    • SHA256

      01c89a1a7d1502649928187c608673988eaaba24b03da6498041b075395fda94

    • SHA512

      c2d41e3f2bd4140eb93ebbc45382837fd3739ecb4a5346c6b964128eb7357bcfea887f9e127a4090d7f9963624a5207597d385eb40298eb890c0dcc484a65cac

    • SSDEEP

      24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbBwlKenUT5Ja5ugsz7zcQOXqhb7/:GezaTF8FcNkNdfE0pZ9oztFwIHT5JaoH

    Score
    10/10
    xmrigminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks