Overview

overview

10

Static

static

10

0c6074257b...cs.exe

windows7-x64

10

0c6074257b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c6074257bdde3cdce8426cce467c14c57f09a1a3b1e7d682faad5dcc15b54bc_NeikiAnalytics.exe

  • Size

    2.4MB

  • Sample

    240627-w7p8nathqd

  • MD5

    4b8769835298f41348972fcd55a708e0

  • SHA1

    3b6b7c384cda3957fc00aa0c3237e4030455b153

  • SHA256

    0c6074257bdde3cdce8426cce467c14c57f09a1a3b1e7d682faad5dcc15b54bc

  • SHA512

    487761164682e06284935318a9268dad3d4ab03ffa1b55b076be6c71db61e571d26b2cba2920cca76ba6d6619b10d3940901f1ce85c51be8b448e819b39a2d07

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKrwwyGwSw3c:BemTLkNdfE0pZrww

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      0c6074257bdde3cdce8426cce467c14c57f09a1a3b1e7d682faad5dcc15b54bc_NeikiAnalytics.exe

    • Size

      2.4MB

    • MD5

      4b8769835298f41348972fcd55a708e0

    • SHA1

      3b6b7c384cda3957fc00aa0c3237e4030455b153

    • SHA256

      0c6074257bdde3cdce8426cce467c14c57f09a1a3b1e7d682faad5dcc15b54bc

    • SHA512

      487761164682e06284935318a9268dad3d4ab03ffa1b55b076be6c71db61e571d26b2cba2920cca76ba6d6619b10d3940901f1ce85c51be8b448e819b39a2d07

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKrwwyGwSw3c:BemTLkNdfE0pZrww

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks