Overview

overview

10

Static

static

10

104e5beadb...cs.exe

windows7-x64

10

104e5beadb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    104e5beadbb8a40afd1e447c9668c710_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240603-3bmafsdf42

  • MD5

    104e5beadbb8a40afd1e447c9668c710

  • SHA1

    669f9036f8772cf5909d825ee66a2d73de29de2a

  • SHA256

    e6ae6a7cab98cc1a5d24b91a2a90918048f75aa04cb394b849e9b05678e508ed

  • SHA512

    bfc31e455c176efa60fe64bb75ecf0f9cbe3ea797f422abe35601be3f524446acda62623f95c5d0fcd49c4355a7fc16296b34b671068b974f567c87647487ffb

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+rE:BemTLkNdfE0pZrwg

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      104e5beadbb8a40afd1e447c9668c710_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      104e5beadbb8a40afd1e447c9668c710

    • SHA1

      669f9036f8772cf5909d825ee66a2d73de29de2a

    • SHA256

      e6ae6a7cab98cc1a5d24b91a2a90918048f75aa04cb394b849e9b05678e508ed

    • SHA512

      bfc31e455c176efa60fe64bb75ecf0f9cbe3ea797f422abe35601be3f524446acda62623f95c5d0fcd49c4355a7fc16296b34b671068b974f567c87647487ffb

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+rE:BemTLkNdfE0pZrwg

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks