Overview

overview

10

Static

static

10

05aa4a89c0...cs.exe

windows7-x64

10

05aa4a89c0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05aa4a89c01f3aecafe4890484aca600_NeikiAnalytics.exe

  • Size

    2.4MB

  • Sample

    240603-va5reaea33

  • MD5

    05aa4a89c01f3aecafe4890484aca600

  • SHA1

    5279ab49c64f3b6a8c9b72767b7b08c816f42f1f

  • SHA256

    2c4f88affc1043e90c002b8dedfa5e6a313fa3fc6ee8e47d2a7a712928b91971

  • SHA512

    ed58e5f5cf1004f8a65bd29615a972e6a1fc1295ec50f2fe18f43ed973ddf95355fd53c27a4d692d77cb112ba774442eddd07264dacce9f08a7687822a297bde

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eo0F:BemTLkNdfE0pZrwO

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      05aa4a89c01f3aecafe4890484aca600_NeikiAnalytics.exe

    • Size

      2.4MB

    • MD5

      05aa4a89c01f3aecafe4890484aca600

    • SHA1

      5279ab49c64f3b6a8c9b72767b7b08c816f42f1f

    • SHA256

      2c4f88affc1043e90c002b8dedfa5e6a313fa3fc6ee8e47d2a7a712928b91971

    • SHA512

      ed58e5f5cf1004f8a65bd29615a972e6a1fc1295ec50f2fe18f43ed973ddf95355fd53c27a4d692d77cb112ba774442eddd07264dacce9f08a7687822a297bde

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eo0F:BemTLkNdfE0pZrwO

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks