Overview

overview

10

Static

static

10

003dd0cb2d...cs.exe

windows7-x64

10

003dd0cb2d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    003dd0cb2df128439c3fe05b6359e360f0c953b93136361cef8773e5bb229ffc_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240623-p266na1brc

  • MD5

    ed31e0d95c62366c16b372b631317230

  • SHA1

    1ec060180a689b4f905eeca263ab812165eec0b0

  • SHA256

    003dd0cb2df128439c3fe05b6359e360f0c953b93136361cef8773e5bb229ffc

  • SHA512

    c7ca073f1847aded959b52baa155fe9484dd7747b44cd7dd82c1a5ce0dbc7752e5ff84504998247e0ad57dd2bdf4d10fe5fb1ba3ee250c81e615de6e51bf5a9f

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PRQ:GemTLkNdfE0pZaQe

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      003dd0cb2df128439c3fe05b6359e360f0c953b93136361cef8773e5bb229ffc_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      ed31e0d95c62366c16b372b631317230

    • SHA1

      1ec060180a689b4f905eeca263ab812165eec0b0

    • SHA256

      003dd0cb2df128439c3fe05b6359e360f0c953b93136361cef8773e5bb229ffc

    • SHA512

      c7ca073f1847aded959b52baa155fe9484dd7747b44cd7dd82c1a5ce0dbc7752e5ff84504998247e0ad57dd2bdf4d10fe5fb1ba3ee250c81e615de6e51bf5a9f

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PRQ:GemTLkNdfE0pZaQe

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks