Overview

overview

10

Static

static

10

72d0d640b6...cs.exe

windows7-x64

10

72d0d640b6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72d0d640b659beaabfbd9f70c70d0c309d7deba774e96417d9622a3b8d9627fe_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240626-kzh9lazbmm

  • MD5

    e272ef81334296137a7418122c3b4b20

  • SHA1

    e62dd8968bd7a4ed2811ef8f954b6ffc4cf23c3b

  • SHA256

    72d0d640b659beaabfbd9f70c70d0c309d7deba774e96417d9622a3b8d9627fe

  • SHA512

    6b4b5db41d75f2791325d05377caa7ee65c68eea7412f309b1851999e1f55bedc9f3d28711d922989e603a01c587ba35de7abbc3c5fbc08ae5af05fea35547d7

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2iVtS:GemTLkNdfE0pZaQB

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      72d0d640b659beaabfbd9f70c70d0c309d7deba774e96417d9622a3b8d9627fe_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      e272ef81334296137a7418122c3b4b20

    • SHA1

      e62dd8968bd7a4ed2811ef8f954b6ffc4cf23c3b

    • SHA256

      72d0d640b659beaabfbd9f70c70d0c309d7deba774e96417d9622a3b8d9627fe

    • SHA512

      6b4b5db41d75f2791325d05377caa7ee65c68eea7412f309b1851999e1f55bedc9f3d28711d922989e603a01c587ba35de7abbc3c5fbc08ae5af05fea35547d7

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2iVtS:GemTLkNdfE0pZaQB

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks