General

  • Target

    36595325939d7d009a5de72779b7ec10_NeikiAnalytics.exe

  • Size

    1.7MB

  • Sample

    240602-e1yssaag91

  • MD5

    36595325939d7d009a5de72779b7ec10

  • SHA1

    9e538293f92cce2e5002444152b9ee487ee65a91

  • SHA256

    8cdfb0c00ba6bf137ed9efc1fcc6e6db5ef640feb816d1185cdb179962958a79

  • SHA512

    45b31966b4e9e50b6ada8174dd7c38d911df9a1319f76aff13fda4ad5d01f722c404b69d35c1e6a62e31fc6a3776b670c714f8ae38f0ce2e867629dd564ffc68

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9ze:Lz071uv4BPMkibTIA5lCx7kvRWa4pUaz

Malware Config

Targets

    • Target

      36595325939d7d009a5de72779b7ec10_NeikiAnalytics.exe

    • Size

      1.7MB

    • MD5

      36595325939d7d009a5de72779b7ec10

    • SHA1

      9e538293f92cce2e5002444152b9ee487ee65a91

    • SHA256

      8cdfb0c00ba6bf137ed9efc1fcc6e6db5ef640feb816d1185cdb179962958a79

    • SHA512

      45b31966b4e9e50b6ada8174dd7c38d911df9a1319f76aff13fda4ad5d01f722c404b69d35c1e6a62e31fc6a3776b670c714f8ae38f0ce2e867629dd564ffc68

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9ze:Lz071uv4BPMkibTIA5lCx7kvRWa4pUaz

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks