General

  • Target

    770fdd6eabf76e35b44ad5a45e03a77f7629d8b5e3cc1f56da5544b7df0a2d56_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240624-qawfhsxark

  • MD5

    2f00c8ff9fb242ce0305aeb76b78d6c0

  • SHA1

    c90038e6de5ebb8b42ca2c83e895b6d9a7600618

  • SHA256

    770fdd6eabf76e35b44ad5a45e03a77f7629d8b5e3cc1f56da5544b7df0a2d56

  • SHA512

    03c5ce01a78d0fb9884161c427a61964445a364684f8d60f2725233dff35ca5cc60b35acf341d837ab933a0dd5ecd7eb4451336e756058108cebff4bcc7a23a4

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3iXkUJ1:BemTLkNdfE0pZrwU

Malware Config

Targets

    • Target

      770fdd6eabf76e35b44ad5a45e03a77f7629d8b5e3cc1f56da5544b7df0a2d56_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      2f00c8ff9fb242ce0305aeb76b78d6c0

    • SHA1

      c90038e6de5ebb8b42ca2c83e895b6d9a7600618

    • SHA256

      770fdd6eabf76e35b44ad5a45e03a77f7629d8b5e3cc1f56da5544b7df0a2d56

    • SHA512

      03c5ce01a78d0fb9884161c427a61964445a364684f8d60f2725233dff35ca5cc60b35acf341d837ab933a0dd5ecd7eb4451336e756058108cebff4bcc7a23a4

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3iXkUJ1:BemTLkNdfE0pZrwU

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks