Overview

overview

10

Static

static

10

7b32bacd9c...cs.exe

windows7-x64

10

7b32bacd9c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b32bacd9c840a6c8ceef38ec7d29fd0_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240523-c9pv5abc99

  • MD5

    7b32bacd9c840a6c8ceef38ec7d29fd0

  • SHA1

    67f6dd367555b3d97328ad478e38bb922c8a5104

  • SHA256

    8d3fb2c48c4d484a5604bc781c40b2bcd0644807d8e7825ae7d17ade1c43ad83

  • SHA512

    863a821902d943b4f9c552f88579b042796b1e68f2cbab17f74a9718a420cd7800a36db92b191852c0c73325e575d42af75e2cae23f377c79232db270dae7650

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O1/O:BemTLkNdfE0pZrwt

Score
10/10
gozikpotxmrigbankerisfbminerstealertrojanupx

Malware Config

Extracted

Family

gozi

Targets

    • Target

      7b32bacd9c840a6c8ceef38ec7d29fd0_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      7b32bacd9c840a6c8ceef38ec7d29fd0

    • SHA1

      67f6dd367555b3d97328ad478e38bb922c8a5104

    • SHA256

      8d3fb2c48c4d484a5604bc781c40b2bcd0644807d8e7825ae7d17ade1c43ad83

    • SHA512

      863a821902d943b4f9c552f88579b042796b1e68f2cbab17f74a9718a420cd7800a36db92b191852c0c73325e575d42af75e2cae23f377c79232db270dae7650

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O1/O:BemTLkNdfE0pZrwt

    Score
    10/10
    gozikpotxmrigbankerisfbminerstealertrojanupx

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks