kpot | 668c5139eb337de59e6b157ca6459f00_NeikiAnalytics[.]exe

General

Target

668c5139eb337de59e6b157ca6459f00_NeikiAnalytics.exe
Size

2.3MB
MD5

668c5139eb337de59e6b157ca6459f00
SHA1

554a33761b5679c190c7bae9f85192e8fecc4041
SHA256

b0fe995a4a7cb6f7f2336e1acec600f22b96cabfb4fd86bed301b4dacff5180c
SHA512

15186c5b3e317055a119c090431d9485f2c5f53a3249761e420520d48f9ed3f9012b409bf1c117261f8eaa17da7175023e17d8c6b5d22f1d9fffee7f67793146
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6twjVDC:BemTLkNdfE0pZrwr

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
668c5139eb337de59e6b157ca6459f00_NeikiAnalytics.exe