General

  • Target

    94a4277b30f0c2c228c56d1eb7b87ce0_NeikiAnalytics.exe

  • Size

    2.4MB

  • Sample

    240601-kgg9ksfe6s

  • MD5

    94a4277b30f0c2c228c56d1eb7b87ce0

  • SHA1

    2e7206f0f272cd7892a6f724bae0bcd178fdb98a

  • SHA256

    d1f3825ec7ea128de27de52c01a180f0b34fc70041adfe6b410b9af808c1e35f

  • SHA512

    84db8656549582ff01997be1e3094d07fa40727106b17b6ba162d66e53218203554c28f16b258c0c9b24cf8859dbf9989b81f0834b60de0a9d1212b2661daa13

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eox:BemTLkNdfE0pZrwb

Malware Config

Targets

    • Target

      94a4277b30f0c2c228c56d1eb7b87ce0_NeikiAnalytics.exe

    • Size

      2.4MB

    • MD5

      94a4277b30f0c2c228c56d1eb7b87ce0

    • SHA1

      2e7206f0f272cd7892a6f724bae0bcd178fdb98a

    • SHA256

      d1f3825ec7ea128de27de52c01a180f0b34fc70041adfe6b410b9af808c1e35f

    • SHA512

      84db8656549582ff01997be1e3094d07fa40727106b17b6ba162d66e53218203554c28f16b258c0c9b24cf8859dbf9989b81f0834b60de0a9d1212b2661daa13

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eox:BemTLkNdfE0pZrwb

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks