Overview

overview

10

Static

static

10

520bb84723...cs.exe

windows7-x64

10

520bb84723...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    520bb847238d64fbde6e2d0fff6d8a30_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240605-ne7m8seh22

  • MD5

    520bb847238d64fbde6e2d0fff6d8a30

  • SHA1

    e3dc5bfed02d1e1c27b0bfa936ab7998c5b7d5a5

  • SHA256

    57a8f81e894a537d0c219e3ca9dac0f54e4306f03ca82b7f676d68908ccf320e

  • SHA512

    97b717c60e8253c1bf365e952d6d7da2563474eed1aaad5ac37915ee5a0a5dbe50446c20a460c3a7c4ce3590fe95673b0b852b93f137d9e1af908418bade86e5

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9f:ROdWCCi7/raZ5aIwC+Agr6SNasw

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      520bb847238d64fbde6e2d0fff6d8a30_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      520bb847238d64fbde6e2d0fff6d8a30

    • SHA1

      e3dc5bfed02d1e1c27b0bfa936ab7998c5b7d5a5

    • SHA256

      57a8f81e894a537d0c219e3ca9dac0f54e4306f03ca82b7f676d68908ccf320e

    • SHA512

      97b717c60e8253c1bf365e952d6d7da2563474eed1aaad5ac37915ee5a0a5dbe50446c20a460c3a7c4ce3590fe95673b0b852b93f137d9e1af908418bade86e5

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9f:ROdWCCi7/raZ5aIwC+Agr6SNasw

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks