Overview

overview

10

Static

static

10

4e1ca233fc...cs.exe

windows7-x64

10

4e1ca233fc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e1ca233fc9a221eb13642839e930f10_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240529-kxh6tahd5y

  • MD5

    4e1ca233fc9a221eb13642839e930f10

  • SHA1

    723058d5a34bb3d070b9d4d51ea472d9251fe365

  • SHA256

    a3b1e1d54b2348a17ed7163bbb75f2ff7ffeec805bae563f57da3497d78ebc72

  • SHA512

    59a6dde8736ec317fc7bd6e6ce11aff683a78c75dcbd849ab0f3129f3e9cb845b72fe15b7cfd1b77d013f33f90a929f2a325c5b67276a539c600bf1255502f80

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3i7L:BemTLkNdfE0pZrwc

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      4e1ca233fc9a221eb13642839e930f10_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      4e1ca233fc9a221eb13642839e930f10

    • SHA1

      723058d5a34bb3d070b9d4d51ea472d9251fe365

    • SHA256

      a3b1e1d54b2348a17ed7163bbb75f2ff7ffeec805bae563f57da3497d78ebc72

    • SHA512

      59a6dde8736ec317fc7bd6e6ce11aff683a78c75dcbd849ab0f3129f3e9cb845b72fe15b7cfd1b77d013f33f90a929f2a325c5b67276a539c600bf1255502f80

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3i7L:BemTLkNdfE0pZrwc

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks