Overview

overview

10

Static

static

10

5fec26cf32...cs.exe

windows7-x64

10

5fec26cf32...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fec26cf32a76917da704e8737fb0b60_NeikiAnalytics.exe

  • Size

    2.4MB

  • Sample

    240530-cmfnyabg65

  • MD5

    5fec26cf32a76917da704e8737fb0b60

  • SHA1

    13ee9e760a67a27ca8dc641b4ca52f32fc76ed07

  • SHA256

    62a9466b64886ae9969813e93c023a7aeb51c2b4f1bfa790ab4649c6ed7dd852

  • SHA512

    c3d2d9dba108e16429438f1ad11e42388c6e68d018719b0ccc800ce0cbc9cb600578ba5f32af12d77214b91292b169bf624b5a0996e8ca950adb8859bb63e28e

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eos:BemTLkNdfE0pZrw2

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      5fec26cf32a76917da704e8737fb0b60_NeikiAnalytics.exe

    • Size

      2.4MB

    • MD5

      5fec26cf32a76917da704e8737fb0b60

    • SHA1

      13ee9e760a67a27ca8dc641b4ca52f32fc76ed07

    • SHA256

      62a9466b64886ae9969813e93c023a7aeb51c2b4f1bfa790ab4649c6ed7dd852

    • SHA512

      c3d2d9dba108e16429438f1ad11e42388c6e68d018719b0ccc800ce0cbc9cb600578ba5f32af12d77214b91292b169bf624b5a0996e8ca950adb8859bb63e28e

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eos:BemTLkNdfE0pZrw2

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks