General

  • Target

    256f847aa2511215bdc5702db3dff250_NeikiAnalytics.exe

  • Size

    1.8MB

  • Sample

    240612-hhgy4atbkk

  • MD5

    256f847aa2511215bdc5702db3dff250

  • SHA1

    b1d6fb35830d9ac4eca4b0c529c3c7f56186f63d

  • SHA256

    383feca6e03bef270445caefe32f432fbcfa76ef676c1c637b0370e53a9c2415

  • SHA512

    45d0cb4fd2698bbb171722be431e57d5d16c3ae9352b3f488405f8fd43093878ec73a261a2a5bb8eab7260028ef995e41298fcd87e4748e902ba7972a0820a26

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYtgWqabE1yuyzydQ:Lz071uv4BPMkHC0IEFTo/abRuOWQ

Malware Config

Targets

    • Target

      256f847aa2511215bdc5702db3dff250_NeikiAnalytics.exe

    • Size

      1.8MB

    • MD5

      256f847aa2511215bdc5702db3dff250

    • SHA1

      b1d6fb35830d9ac4eca4b0c529c3c7f56186f63d

    • SHA256

      383feca6e03bef270445caefe32f432fbcfa76ef676c1c637b0370e53a9c2415

    • SHA512

      45d0cb4fd2698bbb171722be431e57d5d16c3ae9352b3f488405f8fd43093878ec73a261a2a5bb8eab7260028ef995e41298fcd87e4748e902ba7972a0820a26

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYtgWqabE1yuyzydQ:Lz071uv4BPMkHC0IEFTo/abRuOWQ

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks