Overview

overview

10

Static

static

10

70f2752695...cs.exe

windows7-x64

10

70f2752695...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70f275269590080f34627b9d0bf2e3c35ea4873f7fff5f9e588d477e497917de_NeikiAnalytics.exe

  • Size

    2.3MB

  • Sample

    240624-pf6yrsvfnk

  • MD5

    c7df09c720684bef6b66f6536c6339f0

  • SHA1

    dc4fd12a41adfea82be2524eb8721b0fa0690a94

  • SHA256

    70f275269590080f34627b9d0bf2e3c35ea4873f7fff5f9e588d477e497917de

  • SHA512

    e34b83d38f0f5830d76073139fe04c3abcdaad5801a92d2907532efe49ea9054ee53bc457977b1a0c344fecb5664a81803208ac345ae761291d9c001690f9131

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljaAE:BemTLkNdfE0pZrw+

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      70f275269590080f34627b9d0bf2e3c35ea4873f7fff5f9e588d477e497917de_NeikiAnalytics.exe

    • Size

      2.3MB

    • MD5

      c7df09c720684bef6b66f6536c6339f0

    • SHA1

      dc4fd12a41adfea82be2524eb8721b0fa0690a94

    • SHA256

      70f275269590080f34627b9d0bf2e3c35ea4873f7fff5f9e588d477e497917de

    • SHA512

      e34b83d38f0f5830d76073139fe04c3abcdaad5801a92d2907532efe49ea9054ee53bc457977b1a0c344fecb5664a81803208ac345ae761291d9c001690f9131

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljaAE:BemTLkNdfE0pZrw+

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks