Overview

overview

10

Static

static

10

7e112777a4...cs.exe

windows7-x64

10

7e112777a4...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e112777a47f54280d9033173002afc0_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240531-y292zscf78

  • MD5

    7e112777a47f54280d9033173002afc0

  • SHA1

    e5d5cb02006515cf104d75e9500b0fa9c98556a9

  • SHA256

    1a8134be7812451557b5a443d3c89200238378984062177408dfb17e28c7b4eb

  • SHA512

    7f00762dae24f9399c6125b3704dec55abc6e74d857d0e05a18e080a98c971b7b2ec5f85d154de082e6f4267223692a1558b30159fd3749c46c95e3a89f59035

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3iD+:BemTLkNdfE0pZrwT

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      7e112777a47f54280d9033173002afc0_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      7e112777a47f54280d9033173002afc0

    • SHA1

      e5d5cb02006515cf104d75e9500b0fa9c98556a9

    • SHA256

      1a8134be7812451557b5a443d3c89200238378984062177408dfb17e28c7b4eb

    • SHA512

      7f00762dae24f9399c6125b3704dec55abc6e74d857d0e05a18e080a98c971b7b2ec5f85d154de082e6f4267223692a1558b30159fd3749c46c95e3a89f59035

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3iD+:BemTLkNdfE0pZrwT

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks