Overview

overview

10

Static

static

10

41e49d415a...cs.exe

windows7-x64

10

41e49d415a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41e49d415ae88ef032630afa491def8445c737809c803f0eee89cebb5b4f363d_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240626-dlvxxa1dqh

  • MD5

    abb03d2092fb2704497d21443331b450

  • SHA1

    e43250548a7dce317647ec9df1fcc69c8f53f7a8

  • SHA256

    41e49d415ae88ef032630afa491def8445c737809c803f0eee89cebb5b4f363d

  • SHA512

    d6df7a4fa1e5f2bf6858cb2e07b694ead87ca0f6a9124df028196c6b26d1b21ba1094838d2d81afeb3880989b32b3f8e7a2ff70c3fc5cdff481470b8b481ea61

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2iVc:GemTLkNdfE0pZaQ5

Score
10/10
kpotxmrigminerpersistenceprivilege_escalationstealertrojan

Malware Config

Targets

    • Target

      41e49d415ae88ef032630afa491def8445c737809c803f0eee89cebb5b4f363d_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      abb03d2092fb2704497d21443331b450

    • SHA1

      e43250548a7dce317647ec9df1fcc69c8f53f7a8

    • SHA256

      41e49d415ae88ef032630afa491def8445c737809c803f0eee89cebb5b4f363d

    • SHA512

      d6df7a4fa1e5f2bf6858cb2e07b694ead87ca0f6a9124df028196c6b26d1b21ba1094838d2d81afeb3880989b32b3f8e7a2ff70c3fc5cdff481470b8b481ea61

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2iVc:GemTLkNdfE0pZaQ5

    Score
    10/10
    kpotxmrigminerstealertrojanpersistenceprivilege_escalation

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks