General

  • Target

    ae8beaa94fd32b342eebf7f294166170_NeikiAnalytics.exe

  • Size

    3.1MB

  • Sample

    240614-jqnx2s1crh

  • MD5

    ae8beaa94fd32b342eebf7f294166170

  • SHA1

    e880bc13d185c248a62367a8c0580211cd9d3f27

  • SHA256

    8cc934e489f78198a0d7c7a00fdbb1e78474bfd8821959962d40cba64d7d6093

  • SHA512

    554b3adc8a1ed7335b378f746ee4ad7a3a3abbf34098205d8d7abcffa390ff55be32bb998f40e189c42c9950a97732f6de9ed6aa5e273ca2fe4e605d499f89b9

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWC:7bBeSFku

Malware Config

Targets

    • Target

      ae8beaa94fd32b342eebf7f294166170_NeikiAnalytics.exe

    • Size

      3.1MB

    • MD5

      ae8beaa94fd32b342eebf7f294166170

    • SHA1

      e880bc13d185c248a62367a8c0580211cd9d3f27

    • SHA256

      8cc934e489f78198a0d7c7a00fdbb1e78474bfd8821959962d40cba64d7d6093

    • SHA512

      554b3adc8a1ed7335b378f746ee4ad7a3a3abbf34098205d8d7abcffa390ff55be32bb998f40e189c42c9950a97732f6de9ed6aa5e273ca2fe4e605d499f89b9

    • SSDEEP

      98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWC:7bBeSFku

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks