Overview

overview

10

Static

static

10

cb2c356b7a...cs.exe

windows7-x64

10

cb2c356b7a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb2c356b7a75a427a8e7d7167516a5a0_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240524-h2x5eshe28

  • MD5

    cb2c356b7a75a427a8e7d7167516a5a0

  • SHA1

    01ff7d4c902d42817693dd4e31526a475e73a407

  • SHA256

    e3110aafac459fb2bbd333a4bacf0f57d02d99ca3d379461a594d71d4b6ac428

  • SHA512

    ea977e07b22000f12c0cf8ece173627f9cfc8fb293ae30d76dd8ed44f66761642989826a575a8b38827cfb1448fc317c5965a730074c10ed92840e2de2c92418

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljB:BemTLkNdfE0pZrw9

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      cb2c356b7a75a427a8e7d7167516a5a0_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      cb2c356b7a75a427a8e7d7167516a5a0

    • SHA1

      01ff7d4c902d42817693dd4e31526a475e73a407

    • SHA256

      e3110aafac459fb2bbd333a4bacf0f57d02d99ca3d379461a594d71d4b6ac428

    • SHA512

      ea977e07b22000f12c0cf8ece173627f9cfc8fb293ae30d76dd8ed44f66761642989826a575a8b38827cfb1448fc317c5965a730074c10ed92840e2de2c92418

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljB:BemTLkNdfE0pZrw9

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks