Overview

overview

10

Static

static

10

39dc1dd29a...cs.exe

windows7-x64

10

39dc1dd29a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39dc1dd29af0e46e14ff17d4ccd547d0_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240522-zr4ynagd3t

  • MD5

    39dc1dd29af0e46e14ff17d4ccd547d0

  • SHA1

    c2c2b03b38cc573e7aa9e39e117ddb5990c70172

  • SHA256

    6b39185ec47f174f31e481d1f51ee57f72ecca48dd3a0436bec7d820759272a6

  • SHA512

    50f267ecd43764fbe06e04fc4fe95728e357cd09ca4f0bc1deb9671d1b6336f5fca0bf9e6f529ee2245a5340895b78b676d7bd9e195d1e03883d23568412e791

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQF3OioF5qds74:BemTLkNdfE0pZrQz

Score
10/10
xmrigminerpersistenceupx

Malware Config

Targets

    • Target

      39dc1dd29af0e46e14ff17d4ccd547d0_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      39dc1dd29af0e46e14ff17d4ccd547d0

    • SHA1

      c2c2b03b38cc573e7aa9e39e117ddb5990c70172

    • SHA256

      6b39185ec47f174f31e481d1f51ee57f72ecca48dd3a0436bec7d820759272a6

    • SHA512

      50f267ecd43764fbe06e04fc4fe95728e357cd09ca4f0bc1deb9671d1b6336f5fca0bf9e6f529ee2245a5340895b78b676d7bd9e195d1e03883d23568412e791

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIQF3OioF5qds74:BemTLkNdfE0pZrQz

    Score
    10/10
    xmrigminerupxpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks