Overview

overview

10

Static

static

10

203b8c4daa...cs.exe

windows7-x64

10

203b8c4daa...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    203b8c4daaee6bc3429efcb93ff85950_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240606-172nxacg31

  • MD5

    203b8c4daaee6bc3429efcb93ff85950

  • SHA1

    293d15e1afc587dbe61dd6ac16324f2180c25ed4

  • SHA256

    a84189d4a0be2a68df6e82492586515e47ede0bcaf0c5b8543eb2ec55fa37103

  • SHA512

    0c8d20f61038b622f799421c25cdec00e5a3e7b96df6e07e76e1ba3ba9c5b9f6e1f49b393cab67ea42a9bf426cc266c910e307e5142dcb5a8d79c1e0d41f6532

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxYj+ITWSMgCqQ:BemTLkNdfE0pZrwy

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      203b8c4daaee6bc3429efcb93ff85950_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      203b8c4daaee6bc3429efcb93ff85950

    • SHA1

      293d15e1afc587dbe61dd6ac16324f2180c25ed4

    • SHA256

      a84189d4a0be2a68df6e82492586515e47ede0bcaf0c5b8543eb2ec55fa37103

    • SHA512

      0c8d20f61038b622f799421c25cdec00e5a3e7b96df6e07e76e1ba3ba9c5b9f6e1f49b393cab67ea42a9bf426cc266c910e307e5142dcb5a8d79c1e0d41f6532

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKxYj+ITWSMgCqQ:BemTLkNdfE0pZrwy

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks