Overview

overview

10

Static

static

10

f4f9f52a5d...cs.exe

windows7-x64

10

f4f9f52a5d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4f9f52a5d94387b934913565499e390_NeikiAnalytics.exe

  • Size

    2.5MB

  • Sample

    240601-l2zj2aac86

  • MD5

    f4f9f52a5d94387b934913565499e390

  • SHA1

    99cae5c7c1f603a62ad0fb76ece27d4da91a0100

  • SHA256

    9488a4be5d3c982a478e5a5d2b71737d8774a40b298d22988a854d9ef85f68a9

  • SHA512

    1166398616e05467e754aa4cd78d20ddb667075c9546a73eea76aab2d2b60cb132a34dbdfbf2d2050925a74a102a6ef8f2fedcfe9c3e2c174d798d5d0e9dc8d4

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eoF:BemTLkNdfE0pZrwH

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      f4f9f52a5d94387b934913565499e390_NeikiAnalytics.exe

    • Size

      2.5MB

    • MD5

      f4f9f52a5d94387b934913565499e390

    • SHA1

      99cae5c7c1f603a62ad0fb76ece27d4da91a0100

    • SHA256

      9488a4be5d3c982a478e5a5d2b71737d8774a40b298d22988a854d9ef85f68a9

    • SHA512

      1166398616e05467e754aa4cd78d20ddb667075c9546a73eea76aab2d2b60cb132a34dbdfbf2d2050925a74a102a6ef8f2fedcfe9c3e2c174d798d5d0e9dc8d4

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eoF:BemTLkNdfE0pZrwH

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks