Overview

overview

10

Static

static

10

08cad7f711...cs.exe

windows7-x64

10

08cad7f711...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08cad7f7116fc846e3e92a5dff43c86679bb0a9320a24b0c5e3a25219442493b_NeikiAnalytics.exe

  • Size

    2.4MB

  • Sample

    240629-2qc5nasaml

  • MD5

    da724645f37c76e0d154b0c962a9ef70

  • SHA1

    943cc36145e967727a63feb0cceb5afd18655fea

  • SHA256

    08cad7f7116fc846e3e92a5dff43c86679bb0a9320a24b0c5e3a25219442493b

  • SHA512

    d84dd85d4946a1894a30c95eba319a967bf9c66bf163b8b21893f732721697f73b2038d58b11fb74bf8af179415484efd1651ea2a29ae8a944c276add7810e04

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WA2y:BemTLkNdfE0pZrwQ

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      08cad7f7116fc846e3e92a5dff43c86679bb0a9320a24b0c5e3a25219442493b_NeikiAnalytics.exe

    • Size

      2.4MB

    • MD5

      da724645f37c76e0d154b0c962a9ef70

    • SHA1

      943cc36145e967727a63feb0cceb5afd18655fea

    • SHA256

      08cad7f7116fc846e3e92a5dff43c86679bb0a9320a24b0c5e3a25219442493b

    • SHA512

      d84dd85d4946a1894a30c95eba319a967bf9c66bf163b8b21893f732721697f73b2038d58b11fb74bf8af179415484efd1651ea2a29ae8a944c276add7810e04

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6St1lOqIucI1WA2y:BemTLkNdfE0pZrwQ

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks