Overview

overview

10

Static

static

10

361e54155d...cs.exe

windows7-x64

10

361e54155d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    361e54155d4032df67ff0339dbe286433820d502a29d78536cfbcb48d5444dd3_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240621-dz43qs1dqr

  • MD5

    6a3fa4228ab6b7740ecd16784d655e50

  • SHA1

    ba078f2c4dec393d9a15ecbc43d3102f00c47951

  • SHA256

    361e54155d4032df67ff0339dbe286433820d502a29d78536cfbcb48d5444dd3

  • SHA512

    5ce3183952a364cb133e47e9334384c740601ead100f6cfe4d8c399407f6a5b6792def78d955378e0a1560d9959de9d8edd6802fe8e408a4e118518ea15d1f77

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2rBU:GemTLkNdfE0pZaQ6

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      361e54155d4032df67ff0339dbe286433820d502a29d78536cfbcb48d5444dd3_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      6a3fa4228ab6b7740ecd16784d655e50

    • SHA1

      ba078f2c4dec393d9a15ecbc43d3102f00c47951

    • SHA256

      361e54155d4032df67ff0339dbe286433820d502a29d78536cfbcb48d5444dd3

    • SHA512

      5ce3183952a364cb133e47e9334384c740601ead100f6cfe4d8c399407f6a5b6792def78d955378e0a1560d9959de9d8edd6802fe8e408a4e118518ea15d1f77

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2rBU:GemTLkNdfE0pZaQ6

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks