Overview

overview

10

Static

static

10

0f77aa869a...cs.exe

windows7-x64

10

0f77aa869a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f77aa869a35e63be0037f82a9d3f990_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240612-af7gzawfjn

  • MD5

    0f77aa869a35e63be0037f82a9d3f990

  • SHA1

    5d36a39bafb4e8233ed23a864d66b6ce0a46647c

  • SHA256

    291b63fe39312027465d103ff8ea21839ed301caf989b317d47cd4857c3a632c

  • SHA512

    5ccd6cde1362da0d725ef601f659ffe5aaa84fce223127ff5e64899a1e9f47e5f786538bbadd96f294beb0be58afff04ff714c9527b5b47f0fd3010bde9a224f

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljy:BemTLkNdfE0pZrwu

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      0f77aa869a35e63be0037f82a9d3f990_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      0f77aa869a35e63be0037f82a9d3f990

    • SHA1

      5d36a39bafb4e8233ed23a864d66b6ce0a46647c

    • SHA256

      291b63fe39312027465d103ff8ea21839ed301caf989b317d47cd4857c3a632c

    • SHA512

      5ccd6cde1362da0d725ef601f659ffe5aaa84fce223127ff5e64899a1e9f47e5f786538bbadd96f294beb0be58afff04ff714c9527b5b47f0fd3010bde9a224f

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljy:BemTLkNdfE0pZrwu

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks