Overview

overview

10

Static

static

10

53dc2f64a5...cs.exe

windows7-x64

10

53dc2f64a5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53dc2f64a5222c636c6c66f37c698bf0_NeikiAnalytics.exe

  • Size

    786KB

  • Sample

    240529-prkjxaed5w

  • MD5

    53dc2f64a5222c636c6c66f37c698bf0

  • SHA1

    14176253508b886100b6c0025e43f386684de78c

  • SHA256

    9d5fe17a55ad755e319454fca91c842dd7d38ff5dd9c1cbf65c025d72b1d04a4

  • SHA512

    af8806977400bb9c4b431ebeaf186d459d4bd1a834902fb23aefddde4e844dd41352e5027ba298aa515acfce659aaf43081b62eaf52aff6f38bccda9abd7401c

  • SSDEEP

    12288:zJB0lh5aILwtFPCfmAUtFC6NXbv+GEBQGCsksQjn6YHldGm1u9f1OgU:zQ5aILMCfmAUjzX6xQGCZLFdGm1SfcgU

Score
10/10
kpottrickbotbankerevasionexecutionstealertrojan

Malware Config

Targets

    • Target

      53dc2f64a5222c636c6c66f37c698bf0_NeikiAnalytics.exe

    • Size

      786KB

    • MD5

      53dc2f64a5222c636c6c66f37c698bf0

    • SHA1

      14176253508b886100b6c0025e43f386684de78c

    • SHA256

      9d5fe17a55ad755e319454fca91c842dd7d38ff5dd9c1cbf65c025d72b1d04a4

    • SHA512

      af8806977400bb9c4b431ebeaf186d459d4bd1a834902fb23aefddde4e844dd41352e5027ba298aa515acfce659aaf43081b62eaf52aff6f38bccda9abd7401c

    • SSDEEP

      12288:zJB0lh5aILwtFPCfmAUtFC6NXbv+GEBQGCsksQjn6YHldGm1u9f1OgU:zQ5aILMCfmAUjzX6xQGCZLFdGm1SfcgU

    Score
    10/10
    kpottrickbotbankerevasionexecutionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks