General

  • Target

    a271878003b786d7424d0e24ec4c0dd0_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240525-c6hmmsbh92

  • MD5

    a271878003b786d7424d0e24ec4c0dd0

  • SHA1

    b0288c8ca133adaa7bb575d0b49a0c43e01918cd

  • SHA256

    cc7ecc87fb4e41b6f814643810dfbd8f5178f803214d693dd84a6102d164cb4f

  • SHA512

    70eeaf39179becee57718049520a640debc4418296fad0e571d468afeb0920f5b1b8e719b8a8996af341ca3839ce2bf2b8ddcf9ac23282dfd7afb4a7a910e445

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSM6g+:ROdWCCi7/raZ5aIwC+Agr6SN6

Malware Config

Targets

    • Target

      a271878003b786d7424d0e24ec4c0dd0_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      a271878003b786d7424d0e24ec4c0dd0

    • SHA1

      b0288c8ca133adaa7bb575d0b49a0c43e01918cd

    • SHA256

      cc7ecc87fb4e41b6f814643810dfbd8f5178f803214d693dd84a6102d164cb4f

    • SHA512

      70eeaf39179becee57718049520a640debc4418296fad0e571d468afeb0920f5b1b8e719b8a8996af341ca3839ce2bf2b8ddcf9ac23282dfd7afb4a7a910e445

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSM6g+:ROdWCCi7/raZ5aIwC+Agr6SN6

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks