Overview

overview

10

Static

static

10

33fe56ed22...cs.exe

windows7-x64

10

33fe56ed22...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33fe56ed2289b25836b3b86af5d9dc20_NeikiAnalytics.exe

  • Size

    1.9MB

  • Sample

    240602-epm7xaad81

  • MD5

    33fe56ed2289b25836b3b86af5d9dc20

  • SHA1

    dfc07133e7bd285374b7c666512fdc96c9a6984b

  • SHA256

    12388e8d0d7bcbe5f3e54312db5844d6f813424d08a27f938054d10441a440aa

  • SHA512

    2820c65f6e4ede980ba40a286cb192b9f106f8e20acc84754bcad308f2d3a4b7827b940ea42932985d28e4fcb6e00a8e9df995ec7bd5bac665db6e0248b6304e

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEn0ks76:BemTLkNdfE0pZrwB

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      33fe56ed2289b25836b3b86af5d9dc20_NeikiAnalytics.exe

    • Size

      1.9MB

    • MD5

      33fe56ed2289b25836b3b86af5d9dc20

    • SHA1

      dfc07133e7bd285374b7c666512fdc96c9a6984b

    • SHA256

      12388e8d0d7bcbe5f3e54312db5844d6f813424d08a27f938054d10441a440aa

    • SHA512

      2820c65f6e4ede980ba40a286cb192b9f106f8e20acc84754bcad308f2d3a4b7827b940ea42932985d28e4fcb6e00a8e9df995ec7bd5bac665db6e0248b6304e

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEn0ks76:BemTLkNdfE0pZrwB

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks