Overview

overview

10

Static

static

10

1aafb84013...cs.exe

windows7-x64

10

1aafb84013...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1aafb84013380adb5c024d928acd2860_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240610-zjdfqszapg

  • MD5

    1aafb84013380adb5c024d928acd2860

  • SHA1

    d66e035dc9e5a155aa7cc0f4551dd21b5b2c325c

  • SHA256

    c67c7762025fe26b1a6455a50781a7dfcae65e99b85c521dfb0d33757e3f0d1b

  • SHA512

    491820db6892b5a2cfb9d51e30b741e7d8f60cfe42b6da43f7926d0835905e1276a3b953cbe43636e7c5a7ddc0ea3b0651391397a112896e0e420bb2176d18bf

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqr6/:ROdWCCi7/raZ5aIwC+Agr6StW

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      1aafb84013380adb5c024d928acd2860_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      1aafb84013380adb5c024d928acd2860

    • SHA1

      d66e035dc9e5a155aa7cc0f4551dd21b5b2c325c

    • SHA256

      c67c7762025fe26b1a6455a50781a7dfcae65e99b85c521dfb0d33757e3f0d1b

    • SHA512

      491820db6892b5a2cfb9d51e30b741e7d8f60cfe42b6da43f7926d0835905e1276a3b953cbe43636e7c5a7ddc0ea3b0651391397a112896e0e420bb2176d18bf

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqr6/:ROdWCCi7/raZ5aIwC+Agr6StW

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks