General

  • Target

    5cb4810c0d31a76d2f99d10da4bb33e0_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240525-q39tlsfa94

  • MD5

    5cb4810c0d31a76d2f99d10da4bb33e0

  • SHA1

    2c126a3e42cca9a87f4ea009d75b2fdbfba054bb

  • SHA256

    58e95e51735d1ab0e14e2f51c8889c43b72e869500f8e7aae39e005ac299ef0e

  • SHA512

    c9218dd9767096e73ec8660e4bf55c95f9e8667cfd1286f1ea90ec181f653ef42f3901c1d99cd4536a7f385d45c7e19877450cc25767a2861c6f656f8cfa456c

  • SSDEEP

    24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbBwlKenUT5Ja5ugsz7HY9WlOp:GezaTF8FcNkNdfE0pZ9oztFwIHT5JaoQ

Score
10/10

Malware Config

Targets

    • Target

      5cb4810c0d31a76d2f99d10da4bb33e0_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      5cb4810c0d31a76d2f99d10da4bb33e0

    • SHA1

      2c126a3e42cca9a87f4ea009d75b2fdbfba054bb

    • SHA256

      58e95e51735d1ab0e14e2f51c8889c43b72e869500f8e7aae39e005ac299ef0e

    • SHA512

      c9218dd9767096e73ec8660e4bf55c95f9e8667cfd1286f1ea90ec181f653ef42f3901c1d99cd4536a7f385d45c7e19877450cc25767a2861c6f656f8cfa456c

    • SSDEEP

      24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbBwlKenUT5Ja5ugsz7HY9WlOp:GezaTF8FcNkNdfE0pZ9oztFwIHT5JaoQ

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks