General

  • Target

    a074673b184925de643bdc6ceaaa96a0_NeikiAnalytics.exe

  • Size

    1.6MB

  • Sample

    240603-mq7xpsbf7z

  • MD5

    a074673b184925de643bdc6ceaaa96a0

  • SHA1

    89ab1a2515354a35b7f2ec16845e4c0672818e23

  • SHA256

    636aee5762b24ac0c7551800ecc8a200cd3c1806e41c052c5b39f8e1180e8c88

  • SHA512

    d1bd248cb69833ba30b525c3a9108514ff1cc0fa1f70427d63fd3ac635b48ae2eb477e17ff193916caf7aa7eff207cd563d8f94b01331c656b71b75f3729224e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Qk7SW7r+kQQ7dXQARBa5e0ag2K0hvL70:Lz071uv4BPMkyW10/wKV7hjSe05c2iI

Malware Config

Targets

    • Target

      a074673b184925de643bdc6ceaaa96a0_NeikiAnalytics.exe

    • Size

      1.6MB

    • MD5

      a074673b184925de643bdc6ceaaa96a0

    • SHA1

      89ab1a2515354a35b7f2ec16845e4c0672818e23

    • SHA256

      636aee5762b24ac0c7551800ecc8a200cd3c1806e41c052c5b39f8e1180e8c88

    • SHA512

      d1bd248cb69833ba30b525c3a9108514ff1cc0fa1f70427d63fd3ac635b48ae2eb477e17ff193916caf7aa7eff207cd563d8f94b01331c656b71b75f3729224e

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Qk7SW7r+kQQ7dXQARBa5e0ag2K0hvL70:Lz071uv4BPMkyW10/wKV7hjSe05c2iI

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks