General

  • Target

    eb83997d62232f8881271004a5bd95f0_NeikiAnalytics.exe

  • Size

    1.6MB

  • Sample

    240523-taw9lagd49

  • MD5

    eb83997d62232f8881271004a5bd95f0

  • SHA1

    eab0d9d2c90273970c888c47e245389ddae5209e

  • SHA256

    9026efb3c482869186bfbc91cbb895472b9d3cec175a6fb6e52a580d71b701d3

  • SHA512

    ed0a940a5ceef9b9a246d15962dc9dd88fed762aea9c938b266128b1731cc16aebcb1ceebb4ed600f7dbd100a642bad2411d09853f75f6f04b29c4ff7e9ddfdf

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbGR+caMj0vO/qEekFLn:Lz071uv4BPMkHC0IlnASEx/RkiTZZ

Malware Config

Targets

    • Target

      eb83997d62232f8881271004a5bd95f0_NeikiAnalytics.exe

    • Size

      1.6MB

    • MD5

      eb83997d62232f8881271004a5bd95f0

    • SHA1

      eab0d9d2c90273970c888c47e245389ddae5209e

    • SHA256

      9026efb3c482869186bfbc91cbb895472b9d3cec175a6fb6e52a580d71b701d3

    • SHA512

      ed0a940a5ceef9b9a246d15962dc9dd88fed762aea9c938b266128b1731cc16aebcb1ceebb4ed600f7dbd100a642bad2411d09853f75f6f04b29c4ff7e9ddfdf

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbGR+caMj0vO/qEekFLn:Lz071uv4BPMkHC0IlnASEx/RkiTZZ

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks