General

  • Target

    da9fb73f49367499d737382761dfde50_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240527-ta64ssae82

  • MD5

    da9fb73f49367499d737382761dfde50

  • SHA1

    b8f7510d92bf1f9853dece3c9fd4c6d7d2a1bed5

  • SHA256

    90fd52ced39da7875111f0fc2feae55787b70dd73ab12d9e7246f013fea8e521

  • SHA512

    1d51701e42ca83b136144f065dd24de22886a0074c07353abd2f863d13385484c63185f41d14de2f70423df97ddcae2c7848855ba28291ef4abca02f785451de

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wISK9Ncml5gXt:BemTLkNdfE0pZrY

Score
10/10

Malware Config

Targets

    • Target

      da9fb73f49367499d737382761dfde50_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      da9fb73f49367499d737382761dfde50

    • SHA1

      b8f7510d92bf1f9853dece3c9fd4c6d7d2a1bed5

    • SHA256

      90fd52ced39da7875111f0fc2feae55787b70dd73ab12d9e7246f013fea8e521

    • SHA512

      1d51701e42ca83b136144f065dd24de22886a0074c07353abd2f863d13385484c63185f41d14de2f70423df97ddcae2c7848855ba28291ef4abca02f785451de

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wISK9Ncml5gXt:BemTLkNdfE0pZrY

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks