Overview

overview

10

Static

static

10

98956db3ef...cs.exe

windows7-x64

10

98956db3ef...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98956db3ef467696b8041ddc9703f2e0_NeikiAnalytics.exe

  • Size

    1.9MB

  • Sample

    240603-c6xfssgd9w

  • MD5

    98956db3ef467696b8041ddc9703f2e0

  • SHA1

    296d3c4fe0e504894be2a5423689a965326f6ce7

  • SHA256

    25e7e02b1afa715721eed68fd75c5e2971f2ddac3c557241ba3a5efce14a0be9

  • SHA512

    ea187da345f09e68fe47f2ab1a400dbc40fc6e22bc3401c0a13db7aaccf2a38db5bf0214732f2e16704071b08b9c71e074a85aab1e105914d8470c2d6fe9282d

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FFC+l:GemTLkNdfE0pZaQK

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      98956db3ef467696b8041ddc9703f2e0_NeikiAnalytics.exe

    • Size

      1.9MB

    • MD5

      98956db3ef467696b8041ddc9703f2e0

    • SHA1

      296d3c4fe0e504894be2a5423689a965326f6ce7

    • SHA256

      25e7e02b1afa715721eed68fd75c5e2971f2ddac3c557241ba3a5efce14a0be9

    • SHA512

      ea187da345f09e68fe47f2ab1a400dbc40fc6e22bc3401c0a13db7aaccf2a38db5bf0214732f2e16704071b08b9c71e074a85aab1e105914d8470c2d6fe9282d

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FFC+l:GemTLkNdfE0pZaQK

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks