Overview

overview

10

Static

static

10

5b1843080c...cs.exe

windows7-x64

10

5b1843080c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b1843080c0d087c3ef7ce403ca1f930_NeikiAnalytics.exe

  • Size

    2.5MB

  • Sample

    240602-kb5spagg38

  • MD5

    5b1843080c0d087c3ef7ce403ca1f930

  • SHA1

    fec78dc81b61d02e7f1493eb49ae927306070df7

  • SHA256

    7f45f1842691331cbb7f09109f54c0e9c4e56683c911f394a532806284a14efe

  • SHA512

    e09c554d69d12708bdd51239a0ebdebd65b9dcb8005d5998c3e90a0081d94488cc136177b5354509d4c100b0d1a96478e2100838f490c29b32c5298ed2c8928c

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eod/:BemTLkNdfE0pZrwb

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      5b1843080c0d087c3ef7ce403ca1f930_NeikiAnalytics.exe

    • Size

      2.5MB

    • MD5

      5b1843080c0d087c3ef7ce403ca1f930

    • SHA1

      fec78dc81b61d02e7f1493eb49ae927306070df7

    • SHA256

      7f45f1842691331cbb7f09109f54c0e9c4e56683c911f394a532806284a14efe

    • SHA512

      e09c554d69d12708bdd51239a0ebdebd65b9dcb8005d5998c3e90a0081d94488cc136177b5354509d4c100b0d1a96478e2100838f490c29b32c5298ed2c8928c

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eod/:BemTLkNdfE0pZrwb

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks