Overview

overview

10

Static

static

10

64d2ace8e6...cs.exe

windows7-x64

10

64d2ace8e6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64d2ace8e6daa9e97347b14e345f9610c9a0d0d450d06836731e508829e50fcf_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240620-p65hmasgkj

  • MD5

    890057f2a177d2812188ff46d0f46760

  • SHA1

    afe728378090e0b2eb8e5ab2f67d493a5e37340a

  • SHA256

    64d2ace8e6daa9e97347b14e345f9610c9a0d0d450d06836731e508829e50fcf

  • SHA512

    8b47b15598f53d68ce8c3a476e5fd40f2f41c73da8e12bb1ebde9e1712cfeb26d7fdc19b2232d5b5ff3d6abe4a4a219dc24a7203f7e8156f1e10d4176262aa76

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vlj9wA:BemTLkNdfE0pZrwV

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      64d2ace8e6daa9e97347b14e345f9610c9a0d0d450d06836731e508829e50fcf_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      890057f2a177d2812188ff46d0f46760

    • SHA1

      afe728378090e0b2eb8e5ab2f67d493a5e37340a

    • SHA256

      64d2ace8e6daa9e97347b14e345f9610c9a0d0d450d06836731e508829e50fcf

    • SHA512

      8b47b15598f53d68ce8c3a476e5fd40f2f41c73da8e12bb1ebde9e1712cfeb26d7fdc19b2232d5b5ff3d6abe4a4a219dc24a7203f7e8156f1e10d4176262aa76

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vlj9wA:BemTLkNdfE0pZrwV

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks