Overview

overview

10

Static

static

10

2abfe9b411...cs.exe

windows7-x64

10

2abfe9b411...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2abfe9b4118083e56a8eaf8ccac5a9359e7a734d81107e58756ee7a498a70e2e_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240621-b4f6csveqd

  • MD5

    70906594704775bb79c8834cab9350a0

  • SHA1

    1463c56a1cdd03d519a7bf153f5a544834310d76

  • SHA256

    2abfe9b4118083e56a8eaf8ccac5a9359e7a734d81107e58756ee7a498a70e2e

  • SHA512

    d605aa7ea482b9416e414993c0d4153332df02ab101337aa3c0ce568c4e7f91d73b5e11a1ea415c4c95a0c87e846bd02e4d88feef03004b36a2709c26e31d067

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vlj6:BemTLkNdfE0pZrwO

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      2abfe9b4118083e56a8eaf8ccac5a9359e7a734d81107e58756ee7a498a70e2e_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      70906594704775bb79c8834cab9350a0

    • SHA1

      1463c56a1cdd03d519a7bf153f5a544834310d76

    • SHA256

      2abfe9b4118083e56a8eaf8ccac5a9359e7a734d81107e58756ee7a498a70e2e

    • SHA512

      d605aa7ea482b9416e414993c0d4153332df02ab101337aa3c0ce568c4e7f91d73b5e11a1ea415c4c95a0c87e846bd02e4d88feef03004b36a2709c26e31d067

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vlj6:BemTLkNdfE0pZrwO

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks