Overview

overview

10

Static

static

10

1cac21473b...cs.exe

windows7-x64

10

1cac21473b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cac21473b2872d3ed6b34a2180ee0c0_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240610-1mv1masdnn

  • MD5

    1cac21473b2872d3ed6b34a2180ee0c0

  • SHA1

    ff936241f266efa2744c528e15a41a1c90b329a2

  • SHA256

    1361c8919f0da9d7be8c556cef04d52c07aa0f9f1cd1b91a5a1ede66b44e6200

  • SHA512

    22e92f27c7d53c7b781b4443b20b5acc5f6d928e43d12c6e07c1c85fb89212d6d214bbf1b0f0e550476f55bb39775bffc08546465a8592121c2247d6a3ddaab9

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2Ov:GemTLkNdfE0pZaQU

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      1cac21473b2872d3ed6b34a2180ee0c0_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      1cac21473b2872d3ed6b34a2180ee0c0

    • SHA1

      ff936241f266efa2744c528e15a41a1c90b329a2

    • SHA256

      1361c8919f0da9d7be8c556cef04d52c07aa0f9f1cd1b91a5a1ede66b44e6200

    • SHA512

      22e92f27c7d53c7b781b4443b20b5acc5f6d928e43d12c6e07c1c85fb89212d6d214bbf1b0f0e550476f55bb39775bffc08546465a8592121c2247d6a3ddaab9

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2Ov:GemTLkNdfE0pZaQU

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks