Overview

overview

10

Static

static

10

2796542955...cs.exe

windows7-x64

10

2796542955...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2796542955d5fb9dfbde33e72a1859f0_NeikiAnalytics.exe

  • Size

    1.7MB

  • Sample

    240617-a5l8bswekg

  • MD5

    2796542955d5fb9dfbde33e72a1859f0

  • SHA1

    b6a5584b6b4663e936f43138046921fba443b10f

  • SHA256

    cb40f17f7cc28b4e7feca6a994c2302c7ad27d1589ba14e930ca5529c595b1e5

  • SHA512

    595560e83a43fcd7515e12adfdd0d0d5454b6b696edab6a3e9d722516922f5d2620428f52bda22de206a3b60918e0ab881cb7f4792cb2ba7c1ad3734e1680857

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhMgXQP9+G5KBe2ulQ9lbQHRqqZe88U9r:Lz071uv4BPMkHC0INx29L5KQ2uIbQHlR

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      2796542955d5fb9dfbde33e72a1859f0_NeikiAnalytics.exe

    • Size

      1.7MB

    • MD5

      2796542955d5fb9dfbde33e72a1859f0

    • SHA1

      b6a5584b6b4663e936f43138046921fba443b10f

    • SHA256

      cb40f17f7cc28b4e7feca6a994c2302c7ad27d1589ba14e930ca5529c595b1e5

    • SHA512

      595560e83a43fcd7515e12adfdd0d0d5454b6b696edab6a3e9d722516922f5d2620428f52bda22de206a3b60918e0ab881cb7f4792cb2ba7c1ad3734e1680857

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhMgXQP9+G5KBe2ulQ9lbQHRqqZe88U9r:Lz071uv4BPMkHC0INx29L5KQ2uIbQHlR

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks