Overview

overview

10

Static

static

10

9e7059c83e...cs.exe

windows7-x64

10

9e7059c83e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e7059c83e0662c6962cf2e2e77fce948f2f185f8c302152326dae2e17b15baa_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240628-sr92caybjk

  • MD5

    11ffbec7fce4a853cee1111e3f334ba0

  • SHA1

    ac021e4d7d1bf2f9ea99a3be8d996cc7d513c115

  • SHA256

    9e7059c83e0662c6962cf2e2e77fce948f2f185f8c302152326dae2e17b15baa

  • SHA512

    dffbae40e21c6555ce79cb6d401c3c38d6955cb1febe48c5db6f5cb6f28fa243f37b1fe164ae70efd3c0ad1773fe8ffbe7ca82352997752d29ecac8c3c4a2b52

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNasrf:oemTLkNdfE0pZrwM

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      9e7059c83e0662c6962cf2e2e77fce948f2f185f8c302152326dae2e17b15baa_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      11ffbec7fce4a853cee1111e3f334ba0

    • SHA1

      ac021e4d7d1bf2f9ea99a3be8d996cc7d513c115

    • SHA256

      9e7059c83e0662c6962cf2e2e77fce948f2f185f8c302152326dae2e17b15baa

    • SHA512

      dffbae40e21c6555ce79cb6d401c3c38d6955cb1febe48c5db6f5cb6f28fa243f37b1fe164ae70efd3c0ad1773fe8ffbe7ca82352997752d29ecac8c3c4a2b52

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNasrf:oemTLkNdfE0pZrwM

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks