General

  • Target

    97945dda9f25f107c2244ba02e88def0_NeikiAnalytics.exe

  • Size

    2.6MB

  • Sample

    240614-bzplyazeqb

  • MD5

    97945dda9f25f107c2244ba02e88def0

  • SHA1

    ca3fdb72216f957a4bc7eb38bbc5bd4aaa94aae9

  • SHA256

    dd2a1e5a65db63a33011b570d346870407061827fc1e6af635439f2df1a7d9ad

  • SHA512

    c74771a1fc1ec51af505722207d53444f7fddeefaa6a44fe91449ea5a5610ba237f92b3a35fb72b9ba3c0157d13b564f819957bcd416fc57ec5c505f9dec586e

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SqCPGC6HZkIT/cC:oemTLkNdfE0pZrw1

Malware Config

Targets

    • Target

      97945dda9f25f107c2244ba02e88def0_NeikiAnalytics.exe

    • Size

      2.6MB

    • MD5

      97945dda9f25f107c2244ba02e88def0

    • SHA1

      ca3fdb72216f957a4bc7eb38bbc5bd4aaa94aae9

    • SHA256

      dd2a1e5a65db63a33011b570d346870407061827fc1e6af635439f2df1a7d9ad

    • SHA512

      c74771a1fc1ec51af505722207d53444f7fddeefaa6a44fe91449ea5a5610ba237f92b3a35fb72b9ba3c0157d13b564f819957bcd416fc57ec5c505f9dec586e

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SqCPGC6HZkIT/cC:oemTLkNdfE0pZrw1

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks