General

  • Target

    53fb8ec53626399d1af4c0b13d6bc620_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240529-ptzfvafd25

  • MD5

    53fb8ec53626399d1af4c0b13d6bc620

  • SHA1

    b00e5911cbbd949004366415c581fd2ed5923ecf

  • SHA256

    e9adbb861c929c767d45cfe98b4f91a11bf4e5f4487e47b075c492f5923a0dad

  • SHA512

    dd148cc51d8f81040a9b2e73577c17bf58c4c138c16ae5d8dcbf647a4353704835aecb56864f6ba5a6cc980bbd5e8e51155c979dcce930a6560f5acbc444edfb

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vlje+:BemTLkNdfE0pZrwB

Malware Config

Targets

    • Target

      53fb8ec53626399d1af4c0b13d6bc620_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      53fb8ec53626399d1af4c0b13d6bc620

    • SHA1

      b00e5911cbbd949004366415c581fd2ed5923ecf

    • SHA256

      e9adbb861c929c767d45cfe98b4f91a11bf4e5f4487e47b075c492f5923a0dad

    • SHA512

      dd148cc51d8f81040a9b2e73577c17bf58c4c138c16ae5d8dcbf647a4353704835aecb56864f6ba5a6cc980bbd5e8e51155c979dcce930a6560f5acbc444edfb

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vlje+:BemTLkNdfE0pZrwB

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks