Overview

overview

10

Static

static

10

25ec9117d6...cs.exe

windows7-x64

10

25ec9117d6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25ec9117d6524e78d2dc337d8cc3d4c1e9f78a1e1d4d8e2de2e1d7860288a322_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240621-a8nwbsyalk

  • MD5

    7acc89226610d3d1c019b2dbeb97d1d0

  • SHA1

    234459692602e2eb569c18749f77dff3033f6dad

  • SHA256

    25ec9117d6524e78d2dc337d8cc3d4c1e9f78a1e1d4d8e2de2e1d7860288a322

  • SHA512

    676490cb4f02807b462fb6b41db5d4d1bc18755e078552da9635fcd9870b4b843ff31522b87c7bc72235a2590d5d4f9354484124c7606fc5ac4594a87f539b22

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2Pa:GemTLkNdfE0pZaQa

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      25ec9117d6524e78d2dc337d8cc3d4c1e9f78a1e1d4d8e2de2e1d7860288a322_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      7acc89226610d3d1c019b2dbeb97d1d0

    • SHA1

      234459692602e2eb569c18749f77dff3033f6dad

    • SHA256

      25ec9117d6524e78d2dc337d8cc3d4c1e9f78a1e1d4d8e2de2e1d7860288a322

    • SHA512

      676490cb4f02807b462fb6b41db5d4d1bc18755e078552da9635fcd9870b4b843ff31522b87c7bc72235a2590d5d4f9354484124c7606fc5ac4594a87f539b22

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2Pa:GemTLkNdfE0pZaQa

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks