Overview

overview

10

Static

static

10

1a0623e072...cs.exe

windows7-x64

10

1a0623e072...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a0623e0722330eab97897563a86beab9fdbf708864443691429e7357cac5d04_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240622-24rj7sshlr

  • MD5

    8952fab749cca6596bd1ea7e2677d5f0

  • SHA1

    8d417a5fc3e48ab7a03b86038e90c76351dc1300

  • SHA256

    1a0623e0722330eab97897563a86beab9fdbf708864443691429e7357cac5d04

  • SHA512

    89b4ded2134b4e9a26ee1091c26d63894f6d6b18009c281574e15aed77d159f9d9613da366ecb67122b2dba5ff5c6773b2be80d19e1b6dfdd608f1cbc3d9cec5

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WA2Fa4:BemTLkNdfE0pZrwp

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      1a0623e0722330eab97897563a86beab9fdbf708864443691429e7357cac5d04_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      8952fab749cca6596bd1ea7e2677d5f0

    • SHA1

      8d417a5fc3e48ab7a03b86038e90c76351dc1300

    • SHA256

      1a0623e0722330eab97897563a86beab9fdbf708864443691429e7357cac5d04

    • SHA512

      89b4ded2134b4e9a26ee1091c26d63894f6d6b18009c281574e15aed77d159f9d9613da366ecb67122b2dba5ff5c6773b2be80d19e1b6dfdd608f1cbc3d9cec5

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WA2Fa4:BemTLkNdfE0pZrwp

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks