General

  • Target

    065e90d019cffe4c01c94e58fd16ad442057d4e831c5eda49c4d872b02db6123_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240619-zgssms1arc

  • MD5

    652640f1998c7586148195d93f884b50

  • SHA1

    619596b25f8aaf904da0331432d460eb873083db

  • SHA256

    065e90d019cffe4c01c94e58fd16ad442057d4e831c5eda49c4d872b02db6123

  • SHA512

    c521544aa9ce927ee47cb8f1c204d420d165b30114bdc933202827ac3ec69b9611174e8967e32f5e37c20c6d5e8c9154f9750617f821417c3f80221e549e3f5f

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKrwwyGwSw3hb:BemTLkNdfE0pZrw9

Malware Config

Targets

    • Target

      065e90d019cffe4c01c94e58fd16ad442057d4e831c5eda49c4d872b02db6123_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      652640f1998c7586148195d93f884b50

    • SHA1

      619596b25f8aaf904da0331432d460eb873083db

    • SHA256

      065e90d019cffe4c01c94e58fd16ad442057d4e831c5eda49c4d872b02db6123

    • SHA512

      c521544aa9ce927ee47cb8f1c204d420d165b30114bdc933202827ac3ec69b9611174e8967e32f5e37c20c6d5e8c9154f9750617f821417c3f80221e549e3f5f

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKrwwyGwSw3hb:BemTLkNdfE0pZrw9

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks