General

  • Target

    6130e60ac31990cd2c5ce10ffc0dc790_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240523-y7gydsfb77

  • MD5

    6130e60ac31990cd2c5ce10ffc0dc790

  • SHA1

    3a5eeef8e6a823d1d9b47026804d21eccb17387e

  • SHA256

    fef6268b53f9157f0f22fb5b1682cc1457ac5ce4053e408a8a7a5a7123a90b8b

  • SHA512

    da4d7e550fe2b8d326b3876a22bd4ed9cd2fc6896cd6c20c5fb866afd33b9c532a42401a7db9bbe206f9a0ffd8b1dabb6cda122f0b34ca5886008458189d3ac9

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7SIslzdN2GS:Lz071uv4BPMkyW10/w16BvZ+I8RNa

Malware Config

Targets

    • Target

      6130e60ac31990cd2c5ce10ffc0dc790_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      6130e60ac31990cd2c5ce10ffc0dc790

    • SHA1

      3a5eeef8e6a823d1d9b47026804d21eccb17387e

    • SHA256

      fef6268b53f9157f0f22fb5b1682cc1457ac5ce4053e408a8a7a5a7123a90b8b

    • SHA512

      da4d7e550fe2b8d326b3876a22bd4ed9cd2fc6896cd6c20c5fb866afd33b9c532a42401a7db9bbe206f9a0ffd8b1dabb6cda122f0b34ca5886008458189d3ac9

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7SIslzdN2GS:Lz071uv4BPMkyW10/w16BvZ+I8RNa

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks