kpot | 5383d8a33e2dee6ad4f4781b6a9fe1c0_NeikiAnalytics[.]exe

General

Target

5383d8a33e2dee6ad4f4781b6a9fe1c0_NeikiAnalytics.exe
Size

2.1MB
MD5

5383d8a33e2dee6ad4f4781b6a9fe1c0
SHA1

314c1422f633b8b13c0695041b54fe39e1912130
SHA256

0ac8124c402137d43ac93b40e9060b1438671b15b43dd38801818a8518ae727a
SHA512

4f564d30c83b2cab89f17d9b79b013f77a5e3033ea5126e72f7f25b5cb9ee199b7b0980f8b21a2d6e31d508d2d40847a5818dae099c391a53d77507b56f21f02
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2IAw:BemTLkNdfE0pZrw9

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5383d8a33e2dee6ad4f4781b6a9fe1c0_NeikiAnalytics.exe