kpot | 44205b4a8fc992b9e40bab4bf78d22b0_NeikiAnalytics[.]exe

General

Target

44205b4a8fc992b9e40bab4bf78d22b0_NeikiAnalytics.exe
Size

2.1MB
MD5

44205b4a8fc992b9e40bab4bf78d22b0
SHA1

06dab1a9497c1a51f6c0f102ba6d876813adbea3
SHA256

cbe98ae863f0673984ae416bb5fdcd51c478968f46c74f9fda10f087dc66aa25
SHA512

10009f39487e3380921024893b6bb2af634782ee036fcd0b5f4cc1455fe29cb0fa42ba7f27dda7bfa2a67c2d81f33cb7015d44c122ede8edf3e1bfa552535f30
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2IAo:BemTLkNdfE0pZrwP

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
44205b4a8fc992b9e40bab4bf78d22b0_NeikiAnalytics.exe