Behavioral task
behavioral1
Sample
6e009f7bf708fb74e2a4c93f074bf300_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
6e009f7bf708fb74e2a4c93f074bf300_NeikiAnalytics.exe
-
Size
2.2MB
-
MD5
6e009f7bf708fb74e2a4c93f074bf300
-
SHA1
055f770790cbb2189f8a9566a0d5c82ea63d1ce5
-
SHA256
2f3f8889f9ef0c0773eb1563efe27662c8e2a95cf41037b6c632f0158d8fe935
-
SHA512
4cb48010dce5b62045400c0897c2ae7800aaf35b4d3f7e54115755e93a65fe27cd4e06264fbe267106a3ed2079957bdff01aaf97a3c21d3a954cd4b83f68ae97
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SqCPGvTeP:BemTLkNdfE0pZrwq
Malware Config
Signatures
-
KPOT Core Executable 1 IoCs
resource yara_rule sample family_kpot -
Kpot family
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e009f7bf708fb74e2a4c93f074bf300_NeikiAnalytics.exe
Files
-
6e009f7bf708fb74e2a4c93f074bf300_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE