Overview

overview

10

Static

static

10

216b5cd908...cs.exe

windows7-x64

10

216b5cd908...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    216b5cd908fc94826b9cdf1df50cd40868503d14b238c867ef65c439d8b0c169_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240623-anpl5a1hkd

  • MD5

    5f800956155992279520a3d03b630dd0

  • SHA1

    21b5898a88cdb2f1e51a4423ae7f3e6980b4a72d

  • SHA256

    216b5cd908fc94826b9cdf1df50cd40868503d14b238c867ef65c439d8b0c169

  • SHA512

    efa4db5c048c8144f1f808117c82f6bfbb07e8518dfe24094fd1fe0103e9b708deb70e78c302c28b617ff61254f2d9ce90f5f1191b1bafdb0fb808a829307618

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNasry:oemTLkNdfE0pZrwF

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      216b5cd908fc94826b9cdf1df50cd40868503d14b238c867ef65c439d8b0c169_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      5f800956155992279520a3d03b630dd0

    • SHA1

      21b5898a88cdb2f1e51a4423ae7f3e6980b4a72d

    • SHA256

      216b5cd908fc94826b9cdf1df50cd40868503d14b238c867ef65c439d8b0c169

    • SHA512

      efa4db5c048c8144f1f808117c82f6bfbb07e8518dfe24094fd1fe0103e9b708deb70e78c302c28b617ff61254f2d9ce90f5f1191b1bafdb0fb808a829307618

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNasry:oemTLkNdfE0pZrwF

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks