Overview

overview

10

Static

static

10

4a05633d7d...cs.exe

windows7-x64

10

4a05633d7d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a05633d7da0add0f9d11ac5740b9d76a2c2482ab4f5a4c8d70ec989bcf81912_NeikiAnalytics.exe

  • Size

    1.5MB

  • Sample

    240620-j9ehqaxfpb

  • MD5

    fa721d4b7fc7878b4f4337ae5c7c1040

  • SHA1

    7c428fe56fb4051c7ab9d56f84d91fcc36b24686

  • SHA256

    4a05633d7da0add0f9d11ac5740b9d76a2c2482ab4f5a4c8d70ec989bcf81912

  • SHA512

    64dc69f8e41a46479936f4e656b52ab4059f43dfad7e5a280042c2ff478ad3e808f9fa3d5fa684b548936a86e878d2d4247cf5ac6d5427c6dbd59163ecf62389

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6SNasOqpvZGz:RWWBibyT

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      4a05633d7da0add0f9d11ac5740b9d76a2c2482ab4f5a4c8d70ec989bcf81912_NeikiAnalytics.exe

    • Size

      1.5MB

    • MD5

      fa721d4b7fc7878b4f4337ae5c7c1040

    • SHA1

      7c428fe56fb4051c7ab9d56f84d91fcc36b24686

    • SHA256

      4a05633d7da0add0f9d11ac5740b9d76a2c2482ab4f5a4c8d70ec989bcf81912

    • SHA512

      64dc69f8e41a46479936f4e656b52ab4059f43dfad7e5a280042c2ff478ad3e808f9fa3d5fa684b548936a86e878d2d4247cf5ac6d5427c6dbd59163ecf62389

    • SSDEEP

      49152:ROdWCCi7/raZ5aIwC+Agr6SNasOqpvZGz:RWWBibyT

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks