Extracted

• • Target

    7b32bacd9c840a6c8ceef38ec7d29fd0_NeikiAnalytics.exe

  • Size

    2.2MB

  • MD5

    7b32bacd9c840a6c8ceef38ec7d29fd0

  • SHA1

    67f6dd367555b3d97328ad478e38bb922c8a5104

  • SHA256

    8d3fb2c48c4d484a5604bc781c40b2bcd0644807d8e7825ae7d17ade1c43ad83

  • SHA512

    863a821902d943b4f9c552f88579b042796b1e68f2cbab17f74a9718a420cd7800a36db92b191852c0c73325e575d42af75e2cae23f377c79232db270dae7650

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O1/O:BemTLkNdfE0pZrwt

  Score

  10^/10

  gozikpotxmrigbankerisfbminerstealertrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • KPOT

    KPOT is an information stealer that steals user data and account credentials.

    trojanstealerkpot

  • KPOT Core Executable

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig

  • XMRig Miner payload

    miner

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2