Overview

overview

10

Static

static

10

4e3f777ecb...cs.exe

windows7-x64

10

4e3f777ecb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e3f777ecb19d27e5ea9787554f5c2bda7d2eda4ca2f5322db45a5b395f1e6a1_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240625-lgkkda1gja

  • MD5

    fdb32e0c0ca4f506056dc2bc880fcea0

  • SHA1

    ecf7781057de96077cdd425fbe6963ae9ae0553a

  • SHA256

    4e3f777ecb19d27e5ea9787554f5c2bda7d2eda4ca2f5322db45a5b395f1e6a1

  • SHA512

    8e05241cf9bdaca3ab781381f5c9f129631f734f208f1ea8d1a05e68740c3c8e1c74330b272d15f50fd0eb116cfe5f9edfab422b06c8bd3e8ae898038bb2f44b

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PkZ:GemTLkNdfE0pZaQI

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      4e3f777ecb19d27e5ea9787554f5c2bda7d2eda4ca2f5322db45a5b395f1e6a1_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      fdb32e0c0ca4f506056dc2bc880fcea0

    • SHA1

      ecf7781057de96077cdd425fbe6963ae9ae0553a

    • SHA256

      4e3f777ecb19d27e5ea9787554f5c2bda7d2eda4ca2f5322db45a5b395f1e6a1

    • SHA512

      8e05241cf9bdaca3ab781381f5c9f129631f734f208f1ea8d1a05e68740c3c8e1c74330b272d15f50fd0eb116cfe5f9edfab422b06c8bd3e8ae898038bb2f44b

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PkZ:GemTLkNdfE0pZaQI

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks