Overview

overview

10

Static

static

10

3302c5ee47...cs.exe

windows7-x64

10

3302c5ee47...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3302c5ee474c42233b934e1b3a671e2162e0d84d84b98e332c73661dbc89b37e_NeikiAnalytics.exe

  • Size

    1.9MB

  • Sample

    240625-fr688ssbje

  • MD5

    63ae147565406bd91fa6c73eeb41d2e0

  • SHA1

    7d805d2b362c39feddde72e1654cb9eb79daa83f

  • SHA256

    3302c5ee474c42233b934e1b3a671e2162e0d84d84b98e332c73661dbc89b37e

  • SHA512

    cb062ea6f3a2ab093c821837b74b75f6acb272b7a466df37ac477f26f7997664eade4668465a341e0a6f611031f6f1fe5dbaa6c157d7f2f7b725793fc5b7da58

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FFC+diM:GemTLkNdfE0pZaQ2

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      3302c5ee474c42233b934e1b3a671e2162e0d84d84b98e332c73661dbc89b37e_NeikiAnalytics.exe

    • Size

      1.9MB

    • MD5

      63ae147565406bd91fa6c73eeb41d2e0

    • SHA1

      7d805d2b362c39feddde72e1654cb9eb79daa83f

    • SHA256

      3302c5ee474c42233b934e1b3a671e2162e0d84d84b98e332c73661dbc89b37e

    • SHA512

      cb062ea6f3a2ab093c821837b74b75f6acb272b7a466df37ac477f26f7997664eade4668465a341e0a6f611031f6f1fe5dbaa6c157d7f2f7b725793fc5b7da58

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FFC+diM:GemTLkNdfE0pZaQ2

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks