Overview

overview

10

Static

static

10

321c123800...cs.exe

windows7-x64

10

321c123800...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    321c12380064b857830ceff4e6e8f140_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240522-qnaqzach75

  • MD5

    321c12380064b857830ceff4e6e8f140

  • SHA1

    782681abe070ece3814fa382e55a42e29600b284

  • SHA256

    24379871691e3f430ef11acd322fd0fb117b267dfb5033adcefc661f6311f0c4

  • SHA512

    1bdcfa197b83a3f3e97bbccf6185b5191e7fa8a96467760dada5624bcb0c4472b7ada06e68170115ab24bc5207a2e1bb4fcf42de6dc159b58b7ae56f77524470

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2IAx:BemTLkNdfE0pZrwc

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      321c12380064b857830ceff4e6e8f140_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      321c12380064b857830ceff4e6e8f140

    • SHA1

      782681abe070ece3814fa382e55a42e29600b284

    • SHA256

      24379871691e3f430ef11acd322fd0fb117b267dfb5033adcefc661f6311f0c4

    • SHA512

      1bdcfa197b83a3f3e97bbccf6185b5191e7fa8a96467760dada5624bcb0c4472b7ada06e68170115ab24bc5207a2e1bb4fcf42de6dc159b58b7ae56f77524470

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2IAx:BemTLkNdfE0pZrwc

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks