Overview

overview

10

Static

static

10

a3e90c130f...cs.exe

windows7-x64

10

a3e90c130f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3e90c130f19ee4136faba83545cf443c71cbad70626a66a2085659bd63dbe49_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240628-wc7jfs1bnj

  • MD5

    bd53319c709023b6f8cf40eded0feff0

  • SHA1

    4d95ce9d1df9fa23def1da442c9b4863c5b1bbe9

  • SHA256

    a3e90c130f19ee4136faba83545cf443c71cbad70626a66a2085659bd63dbe49

  • SHA512

    170120a92079d3d4ef2bd659c7a0bea18cf71b65572160f22aab38fa3b8ff2a6217cbed075ad0c08040db92b14271c262aa81cce7fc2443d39d162cfb7dab0b3

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PY:GemTLkNdfE0pZaQY

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      a3e90c130f19ee4136faba83545cf443c71cbad70626a66a2085659bd63dbe49_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      bd53319c709023b6f8cf40eded0feff0

    • SHA1

      4d95ce9d1df9fa23def1da442c9b4863c5b1bbe9

    • SHA256

      a3e90c130f19ee4136faba83545cf443c71cbad70626a66a2085659bd63dbe49

    • SHA512

      170120a92079d3d4ef2bd659c7a0bea18cf71b65572160f22aab38fa3b8ff2a6217cbed075ad0c08040db92b14271c262aa81cce7fc2443d39d162cfb7dab0b3

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2PY:GemTLkNdfE0pZaQY

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks