Overview

overview

10

Static

static

10

44c0746ac7...cs.exe

windows7-x64

10

44c0746ac7...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44c0746ac7795f14870966cf689c55f7677f9d35d9e2a70cf352575b2eaeb4ba_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240620-h82feswbpc

  • MD5

    176b6dc1acf954eb80b15cde92ae2960

  • SHA1

    1f48030c10193adf108784563f69aff5ff539a63

  • SHA256

    44c0746ac7795f14870966cf689c55f7677f9d35d9e2a70cf352575b2eaeb4ba

  • SHA512

    147520cbb85b3a08e97d9cba297a5124ff8e7366bd9a2f9ab5a2378ac96e447111e2ad4a14ce74848b6047db7efdf7ede2d212a3271055b87b0296207b7c587a

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WA2t:BemTLkNdfE0pZrw/

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      44c0746ac7795f14870966cf689c55f7677f9d35d9e2a70cf352575b2eaeb4ba_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      176b6dc1acf954eb80b15cde92ae2960

    • SHA1

      1f48030c10193adf108784563f69aff5ff539a63

    • SHA256

      44c0746ac7795f14870966cf689c55f7677f9d35d9e2a70cf352575b2eaeb4ba

    • SHA512

      147520cbb85b3a08e97d9cba297a5124ff8e7366bd9a2f9ab5a2378ac96e447111e2ad4a14ce74848b6047db7efdf7ede2d212a3271055b87b0296207b7c587a

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WA2t:BemTLkNdfE0pZrw/

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks