Overview

overview

10

Static

static

10

4bb3256c27...cs.exe

windows7-x64

10

4bb3256c27...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bb3256c270e1d279d38f15724d6c870_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240612-247anayamm

  • MD5

    4bb3256c270e1d279d38f15724d6c870

  • SHA1

    615cd9d5f6c78afb1d13fce2dceede56f62ee07a

  • SHA256

    3e7d6e6d8eb3ba1f9ab23140722bf8ebe0537767498a54eaecd959aedcbc74b2

  • SHA512

    9793ab87314649d2268e6a727f3e1997d91dff338308c913584a4886e0c1d3153f05625efee705441f08445de13bc663d7de223884ebd259ccbf32d60a1edc30

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdq/xZDKWNp:ROdWCCi7/raZ5aIwC+Agr6StTDRL

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      4bb3256c270e1d279d38f15724d6c870_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      4bb3256c270e1d279d38f15724d6c870

    • SHA1

      615cd9d5f6c78afb1d13fce2dceede56f62ee07a

    • SHA256

      3e7d6e6d8eb3ba1f9ab23140722bf8ebe0537767498a54eaecd959aedcbc74b2

    • SHA512

      9793ab87314649d2268e6a727f3e1997d91dff338308c913584a4886e0c1d3153f05625efee705441f08445de13bc663d7de223884ebd259ccbf32d60a1edc30

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdq/xZDKWNp:ROdWCCi7/raZ5aIwC+Agr6StTDRL

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks