Overview

overview

10

Static

static

10

4d78edd08c...cs.exe

windows7-x64

10

4d78edd08c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d78edd08cfb0ccabf4227b8ec51c510_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240529-kl8mbshg25

  • MD5

    4d78edd08cfb0ccabf4227b8ec51c510

  • SHA1

    70d36f189001b20bc6ec1fe05cd0dc7bab9df519

  • SHA256

    1cc4c20adbee6c46cac972aa7a58c42d4e36558022d37349c10b96a96cc4d785

  • SHA512

    4543c8b4600fa33534f1098af3139bfb5193c8829da0480273ade0da2d2260e2d2fd7a00107c42dd3d0ec9eb7880d4747a3e03237f7ff7f1b094b89ebfd1f410

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNeP:BemTLkNdfE0pZrwX

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      4d78edd08cfb0ccabf4227b8ec51c510_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      4d78edd08cfb0ccabf4227b8ec51c510

    • SHA1

      70d36f189001b20bc6ec1fe05cd0dc7bab9df519

    • SHA256

      1cc4c20adbee6c46cac972aa7a58c42d4e36558022d37349c10b96a96cc4d785

    • SHA512

      4543c8b4600fa33534f1098af3139bfb5193c8829da0480273ade0da2d2260e2d2fd7a00107c42dd3d0ec9eb7880d4747a3e03237f7ff7f1b094b89ebfd1f410

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNeP:BemTLkNdfE0pZrwX

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks