Overview

overview

10

Static

static

10

d814ff49f2...cs.exe

windows7-x64

10

d814ff49f2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d814ff49f2aaefa8ca0ae06af8765050_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240616-fvaz7s1ckc

  • MD5

    d814ff49f2aaefa8ca0ae06af8765050

  • SHA1

    f7543398653234dc27a6dc17a7d634af0715459c

  • SHA256

    c4a61bd1d42f23bea5869754f2ba24e7fc0eba1367a413c46001e43528d841f9

  • SHA512

    9458bbc3570d2ec79811995f6e504152c2c48fb173d8d01303a0bea0067e63d52126529d0da3b61b1f30b188c25474e4ef7cd0baa9a08ef5234c3a1f950eb3a0

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pbR:BemTLkNdfE0pZrw3

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      d814ff49f2aaefa8ca0ae06af8765050_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      d814ff49f2aaefa8ca0ae06af8765050

    • SHA1

      f7543398653234dc27a6dc17a7d634af0715459c

    • SHA256

      c4a61bd1d42f23bea5869754f2ba24e7fc0eba1367a413c46001e43528d841f9

    • SHA512

      9458bbc3570d2ec79811995f6e504152c2c48fb173d8d01303a0bea0067e63d52126529d0da3b61b1f30b188c25474e4ef7cd0baa9a08ef5234c3a1f950eb3a0

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pbR:BemTLkNdfE0pZrw3

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks