Overview

overview

10

Static

static

10

8017c5364c...cs.exe

windows7-x64

10

8017c5364c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8017c5364cf80e82b84471cf40584da0_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240531-z51hdsdf8w

  • MD5

    8017c5364cf80e82b84471cf40584da0

  • SHA1

    571475ed1f742f15d8c25c965554edfe4c53750a

  • SHA256

    5994c06c9ca7be25ef58b04efa2b1f7671336511c1d820141ec929d9821ec289

  • SHA512

    310b2a78a0afa19454eb38718caa8a2fc19b7e28ff65d021dae4b56fba35e3f87b4727cc9b4c956dc1895d0bbe49e762ac70992bf962d61c2c0271cac042f943

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljh:BemTLkNdfE0pZrwV

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      8017c5364cf80e82b84471cf40584da0_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      8017c5364cf80e82b84471cf40584da0

    • SHA1

      571475ed1f742f15d8c25c965554edfe4c53750a

    • SHA256

      5994c06c9ca7be25ef58b04efa2b1f7671336511c1d820141ec929d9821ec289

    • SHA512

      310b2a78a0afa19454eb38718caa8a2fc19b7e28ff65d021dae4b56fba35e3f87b4727cc9b4c956dc1895d0bbe49e762ac70992bf962d61c2c0271cac042f943

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljh:BemTLkNdfE0pZrwV

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks