Overview

overview

10

Static

static

10

b559d8273a...cs.exe

windows7-x64

10

b559d8273a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b559d8273a432543b6e8f41ce0524740_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240608-xrmchaeg9y

  • MD5

    b559d8273a432543b6e8f41ce0524740

  • SHA1

    4f56e016ee589ba47a43533573c9bfba7fcfec31

  • SHA256

    3036d3257248c0e2d8c2bc1842c2e17af60884176b35d641963a7cabc19939b2

  • SHA512

    d5c2a1534b277a130df6e4c1081b6976f2dccce681854eca2c08386d937aaa9f35ca09298fb04e86c61fa46d14360c875320cde1224eba56fabf17746eff9a2e

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6SqCPGC6HZkIT/cx:RWWBiby0

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      b559d8273a432543b6e8f41ce0524740_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      b559d8273a432543b6e8f41ce0524740

    • SHA1

      4f56e016ee589ba47a43533573c9bfba7fcfec31

    • SHA256

      3036d3257248c0e2d8c2bc1842c2e17af60884176b35d641963a7cabc19939b2

    • SHA512

      d5c2a1534b277a130df6e4c1081b6976f2dccce681854eca2c08386d937aaa9f35ca09298fb04e86c61fa46d14360c875320cde1224eba56fabf17746eff9a2e

    • SSDEEP

      49152:ROdWCCi7/raZ5aIwC+Agr6SqCPGC6HZkIT/cx:RWWBiby0

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks