Overview

overview

10

Static

static

10

1a50179330...cs.exe

windows7-x64

10

1a50179330...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a501793308cf3455e57dd1a6a29ca20_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240527-zskw6shh4t

  • MD5

    1a501793308cf3455e57dd1a6a29ca20

  • SHA1

    302ea1ca518b24fad445434d970f257ba81d6f33

  • SHA256

    e5d9e4697f66b8850933e4e6d683e4717a731b157e1fea458d2126fcf38c419c

  • SHA512

    dd77f4a0627cfc88541c13e8e7c20de185bdd850d781f6e56589b444b046b1b6fee707decd30a8e5ea151b02d8ec5a46a4f5614f0a09b9ab159d9f93e0e4c484

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljv:BemTLkNdfE0pZrwz

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      1a501793308cf3455e57dd1a6a29ca20_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      1a501793308cf3455e57dd1a6a29ca20

    • SHA1

      302ea1ca518b24fad445434d970f257ba81d6f33

    • SHA256

      e5d9e4697f66b8850933e4e6d683e4717a731b157e1fea458d2126fcf38c419c

    • SHA512

      dd77f4a0627cfc88541c13e8e7c20de185bdd850d781f6e56589b444b046b1b6fee707decd30a8e5ea151b02d8ec5a46a4f5614f0a09b9ab159d9f93e0e4c484

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljv:BemTLkNdfE0pZrwz

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks