kpot | 5fbfdd2a3287bd86fde6cdb986814fc0_NeikiAnalytics[.]exe

General

Target

5fbfdd2a3287bd86fde6cdb986814fc0_NeikiAnalytics.exe
Size

2.1MB
MD5

5fbfdd2a3287bd86fde6cdb986814fc0
SHA1

3289b043b18ac0f983db462b473bd4c4a4842b08
SHA256

24eb8dd3dc472b95efdad00fd1038883f9614ee6cc2f70c0e14480ca8d078185
SHA512

e5418f12feeb7579eb15a6854edd0a7dcd361f516179b03033ef09ccb5f7c6aa289e7d8021de35f95698d704e7df4c909691fcd2b070c6fc41b58bafb5885a22
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcI+2IAvD:BemTLkNdfE0pZrwy

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5fbfdd2a3287bd86fde6cdb986814fc0_NeikiAnalytics.exe