Overview

overview

10

Static

static

10

8571f88510...cs.exe

windows7-x64

10

8571f88510...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8571f885103bdc7137594b29f2894fd9014bdd8c163a7d11b2456f0532335b26_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240627-pww4hathnp

  • MD5

    2809108b0d418b9fdceb68ef767e9920

  • SHA1

    f0cbf26eb1fc1bc51f0abeaf11963eca4e692941

  • SHA256

    8571f885103bdc7137594b29f2894fd9014bdd8c163a7d11b2456f0532335b26

  • SHA512

    efcd1fa8178eed54b552f3dc78d3bffe4b9db68ca52a2bfe69d332d8960c496438c0ffe5b038ed6e46af38d04d7394087686b971c431e41196cf811232ea4620

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PI:GemTLkNdfE0pZaQI

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      8571f885103bdc7137594b29f2894fd9014bdd8c163a7d11b2456f0532335b26_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      2809108b0d418b9fdceb68ef767e9920

    • SHA1

      f0cbf26eb1fc1bc51f0abeaf11963eca4e692941

    • SHA256

      8571f885103bdc7137594b29f2894fd9014bdd8c163a7d11b2456f0532335b26

    • SHA512

      efcd1fa8178eed54b552f3dc78d3bffe4b9db68ca52a2bfe69d332d8960c496438c0ffe5b038ed6e46af38d04d7394087686b971c431e41196cf811232ea4620

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PI:GemTLkNdfE0pZaQI

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks