kpot | 52d873f82075958b52c7cc535dd60010_NeikiAnalytics[.]exe

General

Target

52d873f82075958b52c7cc535dd60010_NeikiAnalytics.exe
Size

2.3MB
MD5

52d873f82075958b52c7cc535dd60010
SHA1

eae9147ba786eb479def6dcac6784bf58e49c47d
SHA256

31c5c0de9ebe1bccea10f5439787d705225cae468cca4f4e10fa96dc16500cab
SHA512

62277443e81d25274fc51ae95fd884b193a6e64b61f2ccb2f83e7df2318df04ff78a5edba9655ef721ed8b3afdb5ab35d0178a065dfb853fe7c84a44efeb92ad
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+v:BemTLkNdfE0pZrwv

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
52d873f82075958b52c7cc535dd60010_NeikiAnalytics.exe