General

  • Target

    24d1dc8c307f85f91e9df76967510510_NeikiAnalytics.exe

  • Size

    3.1MB

  • Sample

    240523-g4ycjagb86

  • MD5

    24d1dc8c307f85f91e9df76967510510

  • SHA1

    a34aac370d93b459e790ee34645dd11b19da4b65

  • SHA256

    1a81dc79c4275b608cb136e25079d0320c1b97a8a1dabd66be284ef743afb38b

  • SHA512

    840d84e2ab2689ae989909905176cc69ba353cac6fbd8adca015a46ec001b9adf7357b05cef24c43be48957ae3302a60a48fbd5cda2fab61f941d9f22d5bc81c

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4F:NFWPClF1

Score
10/10

Malware Config

Targets

    • Target

      24d1dc8c307f85f91e9df76967510510_NeikiAnalytics.exe

    • Size

      3.1MB

    • MD5

      24d1dc8c307f85f91e9df76967510510

    • SHA1

      a34aac370d93b459e790ee34645dd11b19da4b65

    • SHA256

      1a81dc79c4275b608cb136e25079d0320c1b97a8a1dabd66be284ef743afb38b

    • SHA512

      840d84e2ab2689ae989909905176cc69ba353cac6fbd8adca015a46ec001b9adf7357b05cef24c43be48957ae3302a60a48fbd5cda2fab61f941d9f22d5bc81c

    • SSDEEP

      98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4F:NFWPClF1

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Tasks