Overview

overview

10

Static

static

10

a0368fa633...cs.exe

windows7-x64

10

a0368fa633...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0368fa6337cf59c30f52c1d734a1920_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240603-mlcwrsbd6v

  • MD5

    a0368fa6337cf59c30f52c1d734a1920

  • SHA1

    9513d17539a9667e8acb27bb4df0794567007932

  • SHA256

    ebf706181f5dd2df3a44156e512fe3a51e6ca6d5aac00acb5731187a5e736690

  • SHA512

    48f03f788121d3f06c5b0c48d02d802bf09988ce592dcfa0666612e30e44efbf3e4be896f3a6087b16251bc5b6b94d5eaaf172ac8876a61f75ffdd39831f9490

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SqCPGvTY:BemTLkNdfE0pZrwo

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      a0368fa6337cf59c30f52c1d734a1920_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      a0368fa6337cf59c30f52c1d734a1920

    • SHA1

      9513d17539a9667e8acb27bb4df0794567007932

    • SHA256

      ebf706181f5dd2df3a44156e512fe3a51e6ca6d5aac00acb5731187a5e736690

    • SHA512

      48f03f788121d3f06c5b0c48d02d802bf09988ce592dcfa0666612e30e44efbf3e4be896f3a6087b16251bc5b6b94d5eaaf172ac8876a61f75ffdd39831f9490

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SqCPGvTY:BemTLkNdfE0pZrwo

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks