Overview

overview

10

Static

static

10

bd83745363...cs.exe

windows7-x64

10

bd83745363...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd83745363559f25acd4ee4e26cd45b0_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240614-n4tsnstclm

  • MD5

    bd83745363559f25acd4ee4e26cd45b0

  • SHA1

    272b8a67f5c888595f0922a1fea902e2b0f20472

  • SHA256

    d35087ca6eab702247c2361e682586c22a14f048f5969bf5087162484ff4ecff

  • SHA512

    668597223b622a3ad128c1dccd7581eea186563d0b1ac7d6d6bc2fcd0a4da3139cdba5d770a558746cb2279d8f7cc9b7901454376b1bb7bda9dc7a9f8eba18c1

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNasOq7:oemTLkNdfE0pZrwU

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      bd83745363559f25acd4ee4e26cd45b0_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      bd83745363559f25acd4ee4e26cd45b0

    • SHA1

      272b8a67f5c888595f0922a1fea902e2b0f20472

    • SHA256

      d35087ca6eab702247c2361e682586c22a14f048f5969bf5087162484ff4ecff

    • SHA512

      668597223b622a3ad128c1dccd7581eea186563d0b1ac7d6d6bc2fcd0a4da3139cdba5d770a558746cb2279d8f7cc9b7901454376b1bb7bda9dc7a9f8eba18c1

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNasOq7:oemTLkNdfE0pZrwU

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks