Overview

overview

10

Static

static

10

64daac9bd6...cs.exe

windows7-x64

10

64daac9bd6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64daac9bd6269d9fe9ec81e79de9cbc6787435f1cc56825fdb87dd749dd9b864_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240626-h3mebavdql

  • MD5

    6a5b8ef39cd47e7b2ba46c24d398fef0

  • SHA1

    35c2b76c3174d1ecd470a638435da04a8983e1bd

  • SHA256

    64daac9bd6269d9fe9ec81e79de9cbc6787435f1cc56825fdb87dd749dd9b864

  • SHA512

    5a413142453031770aa8dc0502ad2e03db4f031975fb1c299380c07f509ba9a848d9b4bfd74b88d99f2971a28e90f2a42494abc4501c2a2064abb7c63c9cd254

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2rv:GemTLkNdfE0pZaQr

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      64daac9bd6269d9fe9ec81e79de9cbc6787435f1cc56825fdb87dd749dd9b864_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      6a5b8ef39cd47e7b2ba46c24d398fef0

    • SHA1

      35c2b76c3174d1ecd470a638435da04a8983e1bd

    • SHA256

      64daac9bd6269d9fe9ec81e79de9cbc6787435f1cc56825fdb87dd749dd9b864

    • SHA512

      5a413142453031770aa8dc0502ad2e03db4f031975fb1c299380c07f509ba9a848d9b4bfd74b88d99f2971a28e90f2a42494abc4501c2a2064abb7c63c9cd254

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2rv:GemTLkNdfE0pZaQr

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks