General

  • Target

    53b990aee95b298ce38ecb64100bad50_NeikiAnalytics.exe

  • Size

    1.9MB

  • Sample

    240529-pn6yqsfa87

  • MD5

    53b990aee95b298ce38ecb64100bad50

  • SHA1

    1aafacd905bd89680e13b9be3e28f53b7a18458a

  • SHA256

    11530d9b969c4df710f134af79c34536736684d6b897663276b2021c8a31685b

  • SHA512

    334808de949122328c7b13001d98c3ffa62615283488d8f5bec1ffa6b2984007060cc9024614124bb6df79592b34487ecc9b685b06788be30c99e5bad7a3882b

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FFC+U:GemTLkNdfE0pZaQ1

Malware Config

Targets

    • Target

      53b990aee95b298ce38ecb64100bad50_NeikiAnalytics.exe

    • Size

      1.9MB

    • MD5

      53b990aee95b298ce38ecb64100bad50

    • SHA1

      1aafacd905bd89680e13b9be3e28f53b7a18458a

    • SHA256

      11530d9b969c4df710f134af79c34536736684d6b897663276b2021c8a31685b

    • SHA512

      334808de949122328c7b13001d98c3ffa62615283488d8f5bec1ffa6b2984007060cc9024614124bb6df79592b34487ecc9b685b06788be30c99e5bad7a3882b

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FFC+U:GemTLkNdfE0pZaQ1

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks