Overview

overview

10

Static

static

10

130ef3f6ad...cs.exe

windows7-x64

10

130ef3f6ad...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    130ef3f6ad3333da23f4da5cd6c8902ee48ae8c65c0c7a4db5f82859733f94f8_NeikiAnalytics.exe

  • Size

    1.9MB

  • Sample

    240628-zc8cjavapk

  • MD5

    ed9edc413c2d8e23fd4a79926d751ea0

  • SHA1

    3209f94c6b20ec19219a0adf7943ad8e6e6fa301

  • SHA256

    130ef3f6ad3333da23f4da5cd6c8902ee48ae8c65c0c7a4db5f82859733f94f8

  • SHA512

    0a414f5c59309f1709df025c45d2208272f8f3e2d5ba2f90c25bd8afda194f65fe8a4f00995a36eb238305525e960a7bd110696b84c9455a7d59a02cb6277402

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FFC+diA:GemTLkNdfE0pZaQe

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      130ef3f6ad3333da23f4da5cd6c8902ee48ae8c65c0c7a4db5f82859733f94f8_NeikiAnalytics.exe

    • Size

      1.9MB

    • MD5

      ed9edc413c2d8e23fd4a79926d751ea0

    • SHA1

      3209f94c6b20ec19219a0adf7943ad8e6e6fa301

    • SHA256

      130ef3f6ad3333da23f4da5cd6c8902ee48ae8c65c0c7a4db5f82859733f94f8

    • SHA512

      0a414f5c59309f1709df025c45d2208272f8f3e2d5ba2f90c25bd8afda194f65fe8a4f00995a36eb238305525e960a7bd110696b84c9455a7d59a02cb6277402

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FFC+diA:GemTLkNdfE0pZaQe

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks