kpot | 7f04607f08b4502b3f72346f76685ff0_NeikiAnalytics[.]exe

General

Target

7f04607f08b4502b3f72346f76685ff0_NeikiAnalytics.exe
Size

2.2MB
MD5

7f04607f08b4502b3f72346f76685ff0
SHA1

0113c65c99abf1880bb5fc3f3ac518d83a3da535
SHA256

d19ad61bfd7f867f70836a6116d58ba88d2bc1a7b2c5d75026cda670a50be97f
SHA512

c3265c0d0ad3f045b092d4e4bcd11b19cfe1f72b100c273547e5e57109ec93d4a417c478642615a60e83577278fe6d87c169696b4f40b10f8979d6b49b6b5b52
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6twjVDz:BemTLkNdfE0pZrwg

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7f04607f08b4502b3f72346f76685ff0_NeikiAnalytics.exe