General

  • Target

    7a55f09737cd29fe284a0d54d46368266df4be18d249361b9d813ee09dae1842_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240622-c7nv2sxhpn

  • MD5

    416f7f2eb6eb92b75295a0ff74e43d80

  • SHA1

    6bef1976fcb61d421819e5cf8aa3ea9d20dc3b40

  • SHA256

    7a55f09737cd29fe284a0d54d46368266df4be18d249361b9d813ee09dae1842

  • SHA512

    39d3ef45b90868e11fe69a101cd533647955ba8e2afbe01b4331387f41952208fd6a042b68ff1a91a84c9052767d6fb69f1f135fed2c785a6e177e6900f2a45c

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pbNciM:BemTLkNdfE0pZrwY

Malware Config

Targets

    • Target

      7a55f09737cd29fe284a0d54d46368266df4be18d249361b9d813ee09dae1842_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      416f7f2eb6eb92b75295a0ff74e43d80

    • SHA1

      6bef1976fcb61d421819e5cf8aa3ea9d20dc3b40

    • SHA256

      7a55f09737cd29fe284a0d54d46368266df4be18d249361b9d813ee09dae1842

    • SHA512

      39d3ef45b90868e11fe69a101cd533647955ba8e2afbe01b4331387f41952208fd6a042b68ff1a91a84c9052767d6fb69f1f135fed2c785a6e177e6900f2a45c

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pbNciM:BemTLkNdfE0pZrwY

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks