Overview

overview

10

Static

static

10

9729334bf7...cs.exe

windows7-x64

10

9729334bf7...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9729334bf76ed7f0c1cd87f00defd494203c184b67b2621cb018f5cda0dee2a0_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240622-plgaasxhkg

  • MD5

    1b682603fa47c5d2ca28609351dd1680

  • SHA1

    24bda511c68b2b9586f2d3fdad93a873c06a83d5

  • SHA256

    9729334bf76ed7f0c1cd87f00defd494203c184b67b2621cb018f5cda0dee2a0

  • SHA512

    06f9d326edb2b089c08a3becb67aef109dcd4fab0ff29acf642b0e2243902f35bbb8d9c72907328159f83b78b151ded1321dd5ae456fbb188a49d36b2c87bd59

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pbNh:BemTLkNdfE0pZrw5

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      9729334bf76ed7f0c1cd87f00defd494203c184b67b2621cb018f5cda0dee2a0_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      1b682603fa47c5d2ca28609351dd1680

    • SHA1

      24bda511c68b2b9586f2d3fdad93a873c06a83d5

    • SHA256

      9729334bf76ed7f0c1cd87f00defd494203c184b67b2621cb018f5cda0dee2a0

    • SHA512

      06f9d326edb2b089c08a3becb67aef109dcd4fab0ff29acf642b0e2243902f35bbb8d9c72907328159f83b78b151ded1321dd5ae456fbb188a49d36b2c87bd59

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6g81pbNh:BemTLkNdfE0pZrw5

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks