Overview

overview

10

Static

static

10

a1ae7196f9...cs.exe

windows7-x64

10

a1ae7196f9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1ae7196f9fef4f6cb4225060529ff00_NeikiAnalytics.exe

  • Size

    2.4MB

  • Sample

    240524-ejx5xscc71

  • MD5

    a1ae7196f9fef4f6cb4225060529ff00

  • SHA1

    193a3260c2c5d7f909097d496a111178b17dc733

  • SHA256

    2642b1ea060c5a13e633c434c6e30c682d645824f2372c288e39ef44c484683b

  • SHA512

    6d9550377a41b8e0188b9efa478da997fd3d4046fce545bfa5eac3daf89be24e629120cb8f5b3d677d2177b56a9feec957600bbd16daa3250800edddfaeefe28

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+ABcizEU7371v:BemTLkNdfE0pZrk

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      a1ae7196f9fef4f6cb4225060529ff00_NeikiAnalytics.exe

    • Size

      2.4MB

    • MD5

      a1ae7196f9fef4f6cb4225060529ff00

    • SHA1

      193a3260c2c5d7f909097d496a111178b17dc733

    • SHA256

      2642b1ea060c5a13e633c434c6e30c682d645824f2372c288e39ef44c484683b

    • SHA512

      6d9550377a41b8e0188b9efa478da997fd3d4046fce545bfa5eac3daf89be24e629120cb8f5b3d677d2177b56a9feec957600bbd16daa3250800edddfaeefe28

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+ABcizEU7371v:BemTLkNdfE0pZrk

    Score
    10/10
    xmrigminerupx

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks