Overview

overview

10

Static

static

10

2ff24fc308...cs.exe

windows7-x64

10

2ff24fc308...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ff24fc308e37f412521c37f1be22d587efc361f429041a14f88494fa2629d64_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240627-2gnj2avdrh

  • MD5

    c249c268b8b476c59b0907251ef43620

  • SHA1

    a5f39a85680fc87a855942602f572b656d92719c

  • SHA256

    2ff24fc308e37f412521c37f1be22d587efc361f429041a14f88494fa2629d64

  • SHA512

    db0fa4d06d2cf601fb5e8ed80b17e337910d5ffe58ba009c0dc0332c9b3530a45272a0cbcdd0286f4a8f9f8c9877805b196af546d34e7787d47acb7f882d72f0

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbGRJpsHEJsXldz:Lz071uv4BPMkHC0IlnASEx/RHp2p

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      2ff24fc308e37f412521c37f1be22d587efc361f429041a14f88494fa2629d64_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      c249c268b8b476c59b0907251ef43620

    • SHA1

      a5f39a85680fc87a855942602f572b656d92719c

    • SHA256

      2ff24fc308e37f412521c37f1be22d587efc361f429041a14f88494fa2629d64

    • SHA512

      db0fa4d06d2cf601fb5e8ed80b17e337910d5ffe58ba009c0dc0332c9b3530a45272a0cbcdd0286f4a8f9f8c9877805b196af546d34e7787d47acb7f882d72f0

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbGRJpsHEJsXldz:Lz071uv4BPMkHC0IlnASEx/RHp2p

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks