Overview

overview

10

Static

static

10

42efcc1a13...cs.exe

windows7-x64

10

42efcc1a13...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42efcc1a137958a3391aaeaf12a5416226994202f81deed5b838a66aebb24704_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240625-jmbtbaxcna

  • MD5

    c9d4fa05a10ee18d9c1df403c979ed50

  • SHA1

    4892afa701d4e5e8341db2b22f1b39e2df1a27a3

  • SHA256

    42efcc1a137958a3391aaeaf12a5416226994202f81deed5b838a66aebb24704

  • SHA512

    a2d8a58bb24f906872a8b6419b70e246201310e9fc9cef0516ff293f078649e963492323b8bcb7244c4005ddfed9519c1b2cf85a1930d17bfcff77945535e718

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PK:GemTLkNdfE0pZaQK

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      42efcc1a137958a3391aaeaf12a5416226994202f81deed5b838a66aebb24704_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      c9d4fa05a10ee18d9c1df403c979ed50

    • SHA1

      4892afa701d4e5e8341db2b22f1b39e2df1a27a3

    • SHA256

      42efcc1a137958a3391aaeaf12a5416226994202f81deed5b838a66aebb24704

    • SHA512

      a2d8a58bb24f906872a8b6419b70e246201310e9fc9cef0516ff293f078649e963492323b8bcb7244c4005ddfed9519c1b2cf85a1930d17bfcff77945535e718

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PK:GemTLkNdfE0pZaQK

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks