General

  • Target

    2422b8049facd2a8acb3c1945e420720_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240612-g5nvgssgmh

  • MD5

    2422b8049facd2a8acb3c1945e420720

  • SHA1

    a7dde5937d65f0861710d31e385bbe05be63b86f

  • SHA256

    d576b31f3c33a285b4bbdd6375431ad578b71653b19050dd88f1e828056cfc17

  • SHA512

    2a70c9660f59e17704100a5ab308ab7e2d198aa1f35a99d7ce1271d1de14f2a293af32dae42b88716ba346dece1686cdb6fb1c69744bef3cebe3d8cc096013e4

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6OBC6y90Xli7w4G8h9HWrYAQW9SbHaGHF1o:ROdWCCi7/ra7Kr5KSmZ

Malware Config

Targets

    • Target

      2422b8049facd2a8acb3c1945e420720_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      2422b8049facd2a8acb3c1945e420720

    • SHA1

      a7dde5937d65f0861710d31e385bbe05be63b86f

    • SHA256

      d576b31f3c33a285b4bbdd6375431ad578b71653b19050dd88f1e828056cfc17

    • SHA512

      2a70c9660f59e17704100a5ab308ab7e2d198aa1f35a99d7ce1271d1de14f2a293af32dae42b88716ba346dece1686cdb6fb1c69744bef3cebe3d8cc096013e4

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6OBC6y90Xli7w4G8h9HWrYAQW9SbHaGHF1o:ROdWCCi7/ra7Kr5KSmZ

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks