Overview

overview

10

Static

static

10

3ea5412398...cs.exe

windows7-x64

10

3ea5412398...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ea5412398cffff91b168ef4aa68fe70_NeikiAnalytics.exe

  • Size

    1.8MB

  • Sample

    240617-dw319swdpn

  • MD5

    3ea5412398cffff91b168ef4aa68fe70

  • SHA1

    0cf4b7ae49cf077524103182ff5a0fd7f779d062

  • SHA256

    fb691d5db2818463e3903b3bd157590ed61d126bca7a7379b5eb75b41e0f9107

  • SHA512

    e5b311eb63e885f33db8ca54b4d1db6375dd1d788cde8087d09b5df38a27d9da2701cf555bc6b9dcb42278e92edbc111eb72f907898d26e584dbf39a0ca2d756

  • SSDEEP

    49152:Lz071uv4BPMkyW10/w16BvZX71Fq86zTW:NABm

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      3ea5412398cffff91b168ef4aa68fe70_NeikiAnalytics.exe

    • Size

      1.8MB

    • MD5

      3ea5412398cffff91b168ef4aa68fe70

    • SHA1

      0cf4b7ae49cf077524103182ff5a0fd7f779d062

    • SHA256

      fb691d5db2818463e3903b3bd157590ed61d126bca7a7379b5eb75b41e0f9107

    • SHA512

      e5b311eb63e885f33db8ca54b4d1db6375dd1d788cde8087d09b5df38a27d9da2701cf555bc6b9dcb42278e92edbc111eb72f907898d26e584dbf39a0ca2d756

    • SSDEEP

      49152:Lz071uv4BPMkyW10/w16BvZX71Fq86zTW:NABm

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks