Overview

overview

10

Static

static

10

6670d875ce...cs.exe

windows7-x64

10

6670d875ce...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6670d875ce3afa58a537257506b0b95fdf15472655eb5c3c2fac68127977b434_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240620-qgpasatcrj

  • MD5

    a2b4d1e2c7d774505b1d35518c9e3ec0

  • SHA1

    b66b0a1e282969bcf8cbace167f453318feb55c6

  • SHA256

    6670d875ce3afa58a537257506b0b95fdf15472655eb5c3c2fac68127977b434

  • SHA512

    b5be8064bf25565f43b846115f74e32b24414909cdece8d0083c9fbf0420de6d1279e97c140f6800d0bbc23a0cad681184081fad393e6b31b2119549210ed7b8

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2rW:GemTLkNdfE0pZaQy

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      6670d875ce3afa58a537257506b0b95fdf15472655eb5c3c2fac68127977b434_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      a2b4d1e2c7d774505b1d35518c9e3ec0

    • SHA1

      b66b0a1e282969bcf8cbace167f453318feb55c6

    • SHA256

      6670d875ce3afa58a537257506b0b95fdf15472655eb5c3c2fac68127977b434

    • SHA512

      b5be8064bf25565f43b846115f74e32b24414909cdece8d0083c9fbf0420de6d1279e97c140f6800d0bbc23a0cad681184081fad393e6b31b2119549210ed7b8

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2rW:GemTLkNdfE0pZaQy

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks