Overview

overview

10

Static

static

10

0d0f44a16d...cs.exe

windows7-x64

10

0d0f44a16d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d0f44a16d056847443af125e4bf75b0_NeikiAnalytics.exe

  • Size

    1.5MB

  • Sample

    240611-3jqylswbpe

  • MD5

    0d0f44a16d056847443af125e4bf75b0

  • SHA1

    921cda34ac14e7314d8b1af179eefd8e46427e08

  • SHA256

    f922bc8bcbf08164a45e583c93196bebf4d81ef9dabcd4c14c2f790cf948ff81

  • SHA512

    b69769da5aa9c4ea49d91d281b9115f0ee6fc3bd8f7fc6a1922686d1b7c216ea829bd2518bb7e687b269bec39d9d48d44ebc9d9f3847d5a1b343e2ec337220cf

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbf+BogYGzi:Lz071uv4BPMkHC0IlnASEx/ml5

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      0d0f44a16d056847443af125e4bf75b0_NeikiAnalytics.exe

    • Size

      1.5MB

    • MD5

      0d0f44a16d056847443af125e4bf75b0

    • SHA1

      921cda34ac14e7314d8b1af179eefd8e46427e08

    • SHA256

      f922bc8bcbf08164a45e583c93196bebf4d81ef9dabcd4c14c2f790cf948ff81

    • SHA512

      b69769da5aa9c4ea49d91d281b9115f0ee6fc3bd8f7fc6a1922686d1b7c216ea829bd2518bb7e687b269bec39d9d48d44ebc9d9f3847d5a1b343e2ec337220cf

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbf+BogYGzi:Lz071uv4BPMkHC0IlnASEx/ml5

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks