Overview

overview

10

Static

static

10

6a06f04ba9...cs.exe

windows7-x64

10

6a06f04ba9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295_NeikiAnalytics.exe

  • Size

    2.9MB

  • Sample

    240628-c5dx3azbkm

  • MD5

    b715ba1cefaecedd5a7679957484ca00

  • SHA1

    105cd1dfd6bce914d9aef929ca09113f4fe928aa

  • SHA256

    6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295

  • SHA512

    8eb51359323a9fde41ce45effde9ec56b79b83b24f13634e8998a5a6356ef1dbd62ac86cb729da360eb6ec4ecc2ed0737a48d9bd4d3c4353d349c77886afd105

  • SSDEEP

    49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcquVoVJjDNOK:w0GnJMOWPClFdx6e0EALKWVTffZiPAcW

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295_NeikiAnalytics.exe

    • Size

      2.9MB

    • MD5

      b715ba1cefaecedd5a7679957484ca00

    • SHA1

      105cd1dfd6bce914d9aef929ca09113f4fe928aa

    • SHA256

      6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295

    • SHA512

      8eb51359323a9fde41ce45effde9ec56b79b83b24f13634e8998a5a6356ef1dbd62ac86cb729da360eb6ec4ecc2ed0737a48d9bd4d3c4353d349c77886afd105

    • SSDEEP

      49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcquVoVJjDNOK:w0GnJMOWPClFdx6e0EALKWVTffZiPAcW

    Score
    10/10
    xmrigminerupx

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks