General

  • Target

    6f4ab0f5e9727a9d43fc76dcf207e2f101303813f0f01ed22a168589ecba5bf6_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240628-dhjepszhkn

  • MD5

    e4856104e388f6a3b0a01d85efbefc00

  • SHA1

    4462968083e5ccf7408e4277101071df9fa51e6b

  • SHA256

    6f4ab0f5e9727a9d43fc76dcf207e2f101303813f0f01ed22a168589ecba5bf6

  • SHA512

    01deee8bc5e75e4a0236534265cc0c6ef88a792be3ec0a0b916cbe282adc353095d395729c87c2001de96f3892bb3fb70de30dcce9ce61c017a455cbabb25e4b

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbGRJpsHEm7qUuQ:Lz071uv4BPMkHC0IlnASEx/RHpK7L

Malware Config

Targets

    • Target

      6f4ab0f5e9727a9d43fc76dcf207e2f101303813f0f01ed22a168589ecba5bf6_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      e4856104e388f6a3b0a01d85efbefc00

    • SHA1

      4462968083e5ccf7408e4277101071df9fa51e6b

    • SHA256

      6f4ab0f5e9727a9d43fc76dcf207e2f101303813f0f01ed22a168589ecba5bf6

    • SHA512

      01deee8bc5e75e4a0236534265cc0c6ef88a792be3ec0a0b916cbe282adc353095d395729c87c2001de96f3892bb3fb70de30dcce9ce61c017a455cbabb25e4b

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbGRJpsHEm7qUuQ:Lz071uv4BPMkHC0IlnASEx/RHpK7L

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks