Overview

overview

10

Static

static

10

2b21c3b0dd...cs.exe

windows7-x64

10

2b21c3b0dd...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b21c3b0ddabfedb9c00308312406ed0_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240605-crnv4scb62

  • MD5

    2b21c3b0ddabfedb9c00308312406ed0

  • SHA1

    fe76339d3a97caea366c9d0c3f6ad9b61cf7b6c1

  • SHA256

    89a9f1a641111862413500b33cb42e99cb5c49140a4123a568fbd6225c64b238

  • SHA512

    81b111fb0630f507c66e1dc6865c73b81df8bf753a0a1a8cab00c77a03e11edeb01aa4b2794c60078dd3d01d0983c1a93e0217c9c064ce96b62faf6b23e6cf9e

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+4R:BemTLkNdfE0pZrwS

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      2b21c3b0ddabfedb9c00308312406ed0_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      2b21c3b0ddabfedb9c00308312406ed0

    • SHA1

      fe76339d3a97caea366c9d0c3f6ad9b61cf7b6c1

    • SHA256

      89a9f1a641111862413500b33cb42e99cb5c49140a4123a568fbd6225c64b238

    • SHA512

      81b111fb0630f507c66e1dc6865c73b81df8bf753a0a1a8cab00c77a03e11edeb01aa4b2794c60078dd3d01d0983c1a93e0217c9c064ce96b62faf6b23e6cf9e

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+4R:BemTLkNdfE0pZrwS

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks