Overview

overview

10

Static

static

10

dcc0ca9da5...cs.exe

windows7-x64

10

dcc0ca9da5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dcc0ca9da5c0aab0107cd85a56724290_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240616-g7m1zaxaqk

  • MD5

    dcc0ca9da5c0aab0107cd85a56724290

  • SHA1

    598872a907411a3fcac105195f4a2b4d44fe5cfd

  • SHA256

    3b2897765f4a1d7a2fe0223839ca3db1558b395e2f4cc5366d7f5ace9494f525

  • SHA512

    6efc314e911ccd5074a55d17c3040d65ec28823351a355bcefc0a8884836a9c457c655d95b6b206d1a794ed5bc89b92e03827bcda8f443773750e52c4abb05b2

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+F:BemTLkNdfE0pZrwF

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      dcc0ca9da5c0aab0107cd85a56724290_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      dcc0ca9da5c0aab0107cd85a56724290

    • SHA1

      598872a907411a3fcac105195f4a2b4d44fe5cfd

    • SHA256

      3b2897765f4a1d7a2fe0223839ca3db1558b395e2f4cc5366d7f5ace9494f525

    • SHA512

      6efc314e911ccd5074a55d17c3040d65ec28823351a355bcefc0a8884836a9c457c655d95b6b206d1a794ed5bc89b92e03827bcda8f443773750e52c4abb05b2

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+F:BemTLkNdfE0pZrwF

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks