General

  • Target

    773cc4399dcbdddc1eeb4d5140206360_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240602-2fn46shd6y

  • MD5

    773cc4399dcbdddc1eeb4d5140206360

  • SHA1

    b4aa23bbca58a9e1fd283b37b95c0428771547e3

  • SHA256

    aa9c14347c8daeb84479763014673d85c6f882715c9550d77fbd14be453d1c58

  • SHA512

    0fc8973dab28966adf36d863c44e8117909dd29183bb6b14c5f53a641326c3a86e9d9f5c234daf46a895b4c84087c52af22c6878ddbe616e6d34d763fec5a491

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljt:BemTLkNdfE0pZrwZ

Malware Config

Targets

    • Target

      773cc4399dcbdddc1eeb4d5140206360_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      773cc4399dcbdddc1eeb4d5140206360

    • SHA1

      b4aa23bbca58a9e1fd283b37b95c0428771547e3

    • SHA256

      aa9c14347c8daeb84479763014673d85c6f882715c9550d77fbd14be453d1c58

    • SHA512

      0fc8973dab28966adf36d863c44e8117909dd29183bb6b14c5f53a641326c3a86e9d9f5c234daf46a895b4c84087c52af22c6878ddbe616e6d34d763fec5a491

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljt:BemTLkNdfE0pZrwZ

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks