Overview

overview

10

Static

static

10

75d1eea4b9...cs.exe

windows7-x64

10

75d1eea4b9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75d1eea4b94b9e06c00c1575a67978f2dd2538233bd73c5aa045032f7f5ca1ee_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240626-llngtsybkg

  • MD5

    1e8c243e1574431f548147884ae6f910

  • SHA1

    2c71860dd19634d138f28222573369f22621d03c

  • SHA256

    75d1eea4b94b9e06c00c1575a67978f2dd2538233bd73c5aa045032f7f5ca1ee

  • SHA512

    4f9625b8a93573d67df834eedb2e9ac541c5008f9456523bd372e2a940edb7653437ccf90bb0de22229967c2a326c4038fa36c279bded2184ddff1e0d2159d96

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3iXkE:BemTLkNdfE0pZrwa

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      75d1eea4b94b9e06c00c1575a67978f2dd2538233bd73c5aa045032f7f5ca1ee_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      1e8c243e1574431f548147884ae6f910

    • SHA1

      2c71860dd19634d138f28222573369f22621d03c

    • SHA256

      75d1eea4b94b9e06c00c1575a67978f2dd2538233bd73c5aa045032f7f5ca1ee

    • SHA512

      4f9625b8a93573d67df834eedb2e9ac541c5008f9456523bd372e2a940edb7653437ccf90bb0de22229967c2a326c4038fa36c279bded2184ddff1e0d2159d96

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI3iXkE:BemTLkNdfE0pZrwa

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks