Overview

overview

10

Static

static

10

6ab5338b31...cs.exe

windows7-x64

10

6ab5338b31...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ab5338b31c9f841d84dea109da8a1f0_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240607-tkb2eabg73

  • MD5

    6ab5338b31c9f841d84dea109da8a1f0

  • SHA1

    5f22b7cdc195a9988aafc037f50a4bc5e95f47b4

  • SHA256

    5bd7fea2460a48322b5b0be7ee926ce17042621fc00509af599ca5b52472b56d

  • SHA512

    89a96afe2afae4efb08e59c38df08e052404b9cb269a1daf8eaf3db289cb9c2b045d5d26c0a0802b572862c36be43cfd1dfd0ba52390da7fe611b18e8e406d82

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9m:ROdWCCi7/raZ5aIwC+Agr6SNasZ

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      6ab5338b31c9f841d84dea109da8a1f0_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      6ab5338b31c9f841d84dea109da8a1f0

    • SHA1

      5f22b7cdc195a9988aafc037f50a4bc5e95f47b4

    • SHA256

      5bd7fea2460a48322b5b0be7ee926ce17042621fc00509af599ca5b52472b56d

    • SHA512

      89a96afe2afae4efb08e59c38df08e052404b9cb269a1daf8eaf3db289cb9c2b045d5d26c0a0802b572862c36be43cfd1dfd0ba52390da7fe611b18e8e406d82

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9m:ROdWCCi7/raZ5aIwC+Agr6SNasZ

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks