General

  • Target

    477aacdd8781b4d4660f8633b2e3af10_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240529-gnmwvsdd94

  • MD5

    477aacdd8781b4d4660f8633b2e3af10

  • SHA1

    52f171f78d27d9b423b09a61d52659d92b64e226

  • SHA256

    1b9fc80d76b6ac4f753c5fabe33c0b43128d22df3eb684d3edb3e15a4832ddc6

  • SHA512

    98e8cc798aa0c90569b3c9da7812709cae6b157a65cf8c99a7124c051e7b11daf6b8c7e828df892ca6d2b5ec9a69be5ef4a0339205b804e9f733c5edbf44011a

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O1Q:BemTLkNdfE0pZrw5

Malware Config

Targets

    • Target

      477aacdd8781b4d4660f8633b2e3af10_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      477aacdd8781b4d4660f8633b2e3af10

    • SHA1

      52f171f78d27d9b423b09a61d52659d92b64e226

    • SHA256

      1b9fc80d76b6ac4f753c5fabe33c0b43128d22df3eb684d3edb3e15a4832ddc6

    • SHA512

      98e8cc798aa0c90569b3c9da7812709cae6b157a65cf8c99a7124c051e7b11daf6b8c7e828df892ca6d2b5ec9a69be5ef4a0339205b804e9f733c5edbf44011a

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxY/O1Q:BemTLkNdfE0pZrw5

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks