General

  • Target

    94374c853a82dfd9b604b9db7633faf0_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240601-j8v43sfc2w

  • MD5

    94374c853a82dfd9b604b9db7633faf0

  • SHA1

    352b58e081f54295cefb4538ae0cfc34ec7bb1fa

  • SHA256

    fa4fd0084103494ce750f5fc55b834dbf9a7d161003b39c7a3d92498abf4f4af

  • SHA512

    a71f27b30b2b9f3ea2cf4437ed760726ff763050026b256f98bb054e543e680df272fdedf42134d0bd25784a7b3f59c734ea4f20e2bac96c5c3f9898f71fc464

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3nP4:BemTLkNdfE0pZrwo

Malware Config

Targets

    • Target

      94374c853a82dfd9b604b9db7633faf0_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      94374c853a82dfd9b604b9db7633faf0

    • SHA1

      352b58e081f54295cefb4538ae0cfc34ec7bb1fa

    • SHA256

      fa4fd0084103494ce750f5fc55b834dbf9a7d161003b39c7a3d92498abf4f4af

    • SHA512

      a71f27b30b2b9f3ea2cf4437ed760726ff763050026b256f98bb054e543e680df272fdedf42134d0bd25784a7b3f59c734ea4f20e2bac96c5c3f9898f71fc464

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3nP4:BemTLkNdfE0pZrwo

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks