Overview

overview

10

Static

static

10

216ee64d74...cs.exe

windows7-x64

10

216ee64d74...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    216ee64d74b62d81ffa03f529649c9b0_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240523-grz1lafh51

  • MD5

    216ee64d74b62d81ffa03f529649c9b0

  • SHA1

    368e51f38fff803adc98d5c8d2e9d607ada00f78

  • SHA256

    c965f196065fbcc0e01bbaa1d7b87a5e88ef501d4a97cbb44138005cf7412589

  • SHA512

    1fe821afb2e1e14edb6bfad36c2d0750821ae9b5867cf319f8eb67604e7217bd039500458a74f4983ad4265078ca42135f0fb6acd0555a2a2840431610615fb8

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O19:BemTLkNdfE0pZrwm

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      216ee64d74b62d81ffa03f529649c9b0_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      216ee64d74b62d81ffa03f529649c9b0

    • SHA1

      368e51f38fff803adc98d5c8d2e9d607ada00f78

    • SHA256

      c965f196065fbcc0e01bbaa1d7b87a5e88ef501d4a97cbb44138005cf7412589

    • SHA512

      1fe821afb2e1e14edb6bfad36c2d0750821ae9b5867cf319f8eb67604e7217bd039500458a74f4983ad4265078ca42135f0fb6acd0555a2a2840431610615fb8

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O19:BemTLkNdfE0pZrwm

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks