Overview

overview

10

Static

static

10

80d845b9c8...cs.exe

windows7-x64

10

80d845b9c8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80d845b9c8c0e44506a9bce3aecef300_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240613-qyhvbs1dpc

  • MD5

    80d845b9c8c0e44506a9bce3aecef300

  • SHA1

    251bb3e82282ddabd47931965e29a1a17f86c872

  • SHA256

    06bb82d5e4dacad49a706f328296f8c809fdfc9364664fa7dca6241cb4147c3f

  • SHA512

    261c569c00434637d2fb40796c10fcb9c50c7414558ed64172284af4cc6caa314a2285f6bb16b827311c2100cf8e6943fa5381e1739f361637e26b6fc10f4e8a

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqexQQ4:ROdWCCi7/raZ5aIwC+Agr6StYO

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      80d845b9c8c0e44506a9bce3aecef300_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      80d845b9c8c0e44506a9bce3aecef300

    • SHA1

      251bb3e82282ddabd47931965e29a1a17f86c872

    • SHA256

      06bb82d5e4dacad49a706f328296f8c809fdfc9364664fa7dca6241cb4147c3f

    • SHA512

      261c569c00434637d2fb40796c10fcb9c50c7414558ed64172284af4cc6caa314a2285f6bb16b827311c2100cf8e6943fa5381e1739f361637e26b6fc10f4e8a

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQtjmssdqexQQ4:ROdWCCi7/raZ5aIwC+Agr6StYO

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks