Overview

overview

10

Static

static

10

276dc3964a...cs.exe

windows7-x64

10

276dc3964a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    276dc3964a30f2b2f926d8a38ee2a530_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240602-c63mtagf72

  • MD5

    276dc3964a30f2b2f926d8a38ee2a530

  • SHA1

    c6d29b8d3f93ed66e4bce0ff92b26147813f7dfa

  • SHA256

    966143258f3cf729741b6f784b2004c90c01a7b102e9ca6fee1c3a72c865e69b

  • SHA512

    ab1819f3ebe3ad525c96f1da231aa55fca6a18d3e18e180118c9756529c97a314839f27c1b666b2050c84617cb97e02bbf81844e377f9a8f4bfea2e7dae3c3b8

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WAB:BemTLkNdfE0pZrwW

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      276dc3964a30f2b2f926d8a38ee2a530_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      276dc3964a30f2b2f926d8a38ee2a530

    • SHA1

      c6d29b8d3f93ed66e4bce0ff92b26147813f7dfa

    • SHA256

      966143258f3cf729741b6f784b2004c90c01a7b102e9ca6fee1c3a72c865e69b

    • SHA512

      ab1819f3ebe3ad525c96f1da231aa55fca6a18d3e18e180118c9756529c97a314839f27c1b666b2050c84617cb97e02bbf81844e377f9a8f4bfea2e7dae3c3b8

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WAB:BemTLkNdfE0pZrwW

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks