General

  • Target

    422e2e16a48546f0c91b8beff30d26b0_NeikiAnalytics.exe

  • Size

    1.7MB

  • Sample

    240605-gnekgsfh2x

  • MD5

    422e2e16a48546f0c91b8beff30d26b0

  • SHA1

    55a5cb8b943defeba07edf52c1bd8a8f8b71ba28

  • SHA256

    317ea3ad33ffd41d56efc041a1b26d78e923f01efa9a4533e65df03f70ce1e5c

  • SHA512

    3440ef1fba5a338a516f2165100d632ed14212d1e6ac88537a864b2eec8c1a35137a452642f97e38f8933715aa9086feea4eb215f8f59d37962e924ff32a68f7

  • SSDEEP

    49152:Lz071uv4BPMkyW10/w16BvZX71Fq86ptQ:NABg

Malware Config

Targets

    • Target

      422e2e16a48546f0c91b8beff30d26b0_NeikiAnalytics.exe

    • Size

      1.7MB

    • MD5

      422e2e16a48546f0c91b8beff30d26b0

    • SHA1

      55a5cb8b943defeba07edf52c1bd8a8f8b71ba28

    • SHA256

      317ea3ad33ffd41d56efc041a1b26d78e923f01efa9a4533e65df03f70ce1e5c

    • SHA512

      3440ef1fba5a338a516f2165100d632ed14212d1e6ac88537a864b2eec8c1a35137a452642f97e38f8933715aa9086feea4eb215f8f59d37962e924ff32a68f7

    • SSDEEP

      49152:Lz071uv4BPMkyW10/w16BvZX71Fq86ptQ:NABg

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks