General

  • Target

    9d34021f9f8c3797d88efbefb1274620_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240614-djlapawhjq

  • MD5

    9d34021f9f8c3797d88efbefb1274620

  • SHA1

    dac3815ff80691cea88169cd6abaafdaa9b038ee

  • SHA256

    238521fe23d9333a0a9681fff05ec4dc9e790e860ff53b5b4a58f5e0962c8c04

  • SHA512

    8604d746570ba1088b16e9ec38f15d52682c1a14f2d198944bff2311fb4fe24d24ea3d3aec50a8ff916b891e62faf841a7f4570f11ed89876d1b980c52fa2ff9

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2c:GemTLkNdfE0pZaQk

Malware Config

Targets

    • Target

      9d34021f9f8c3797d88efbefb1274620_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      9d34021f9f8c3797d88efbefb1274620

    • SHA1

      dac3815ff80691cea88169cd6abaafdaa9b038ee

    • SHA256

      238521fe23d9333a0a9681fff05ec4dc9e790e860ff53b5b4a58f5e0962c8c04

    • SHA512

      8604d746570ba1088b16e9ec38f15d52682c1a14f2d198944bff2311fb4fe24d24ea3d3aec50a8ff916b891e62faf841a7f4570f11ed89876d1b980c52fa2ff9

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2c:GemTLkNdfE0pZaQk

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks