Overview

overview

10

Static

static

10

46d2a48ed0...cs.exe

windows7-x64

10

46d2a48ed0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46d2a48ed02d67d24f2edb588e50419eea659e629c9ca972962506418fc861b7_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240623-g7qrvsweqm

  • MD5

    5c5cff640430f827695f65d43c7adbe0

  • SHA1

    71fb6e648a9fac8ea241d86786cc912d499430d4

  • SHA256

    46d2a48ed02d67d24f2edb588e50419eea659e629c9ca972962506418fc861b7

  • SHA512

    8d361fb7891ce94172f8d92173537f2ff1b6e13444e31279ba59badb90062fe48892b330265ea2805ae716389fd467272d00709c37dd12b7e0322f6c21fdb62a

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2rO:GemTLkNdfE0pZaQi

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      46d2a48ed02d67d24f2edb588e50419eea659e629c9ca972962506418fc861b7_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      5c5cff640430f827695f65d43c7adbe0

    • SHA1

      71fb6e648a9fac8ea241d86786cc912d499430d4

    • SHA256

      46d2a48ed02d67d24f2edb588e50419eea659e629c9ca972962506418fc861b7

    • SHA512

      8d361fb7891ce94172f8d92173537f2ff1b6e13444e31279ba59badb90062fe48892b330265ea2805ae716389fd467272d00709c37dd12b7e0322f6c21fdb62a

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2rO:GemTLkNdfE0pZaQi

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks