kpot | 70a8cf16b9ce8b003a73e2a0b17de4a0_NeikiAnalytics[.]exe

General

Target

70a8cf16b9ce8b003a73e2a0b17de4a0_NeikiAnalytics.exe
Size

2.2MB
MD5

70a8cf16b9ce8b003a73e2a0b17de4a0
SHA1

5e041459dc647046590c4642c466e6aaa40005fb
SHA256

02ab9691c65e3674bed025a7a9a05a88e0ae84ce625d9c3ac56471bac9f28599
SHA512

b70de81c8dc656049f6dc7814b6e8170107c60958210b447313e44f2731e93cf7a3620b71c46bc0678f8f7ed7cc0cb0f1d857c18c3de1b3264155253d8cb99da
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O1GS:BemTLkNdfE0pZrwK

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
70a8cf16b9ce8b003a73e2a0b17de4a0_NeikiAnalytics.exe