Overview

overview

10

Static

static

10

97ea2389b9...cs.exe

windows7-x64

10

97ea2389b9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    97ea2389b96c94e17f28a9423329340fe2a366863d20d5ddc64473f899b98ed5_NeikiAnalytics.exe

  • Size

    1.8MB

  • Sample

    240629-lnmy3sxhkr

  • MD5

    57cd77190802ee414c10fa006ebaedd0

  • SHA1

    07c65cfd7ce7cb0a34d164e1c38b43b6ae7d467f

  • SHA256

    97ea2389b96c94e17f28a9423329340fe2a366863d20d5ddc64473f899b98ed5

  • SHA512

    cd20414982f75b24352564839661e90c17fad002c5990076705cfd5cbe5131612f1035599e4b3fd109c236a011683310f76ef978a8ddb8b3d6eec2e9093519c0

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCnfJCwCc4MAKFpMloooIXruQ:Lz071uv4BPMkFfdgIZohteLMxRguKf

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      97ea2389b96c94e17f28a9423329340fe2a366863d20d5ddc64473f899b98ed5_NeikiAnalytics.exe

    • Size

      1.8MB

    • MD5

      57cd77190802ee414c10fa006ebaedd0

    • SHA1

      07c65cfd7ce7cb0a34d164e1c38b43b6ae7d467f

    • SHA256

      97ea2389b96c94e17f28a9423329340fe2a366863d20d5ddc64473f899b98ed5

    • SHA512

      cd20414982f75b24352564839661e90c17fad002c5990076705cfd5cbe5131612f1035599e4b3fd109c236a011683310f76ef978a8ddb8b3d6eec2e9093519c0

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCnfJCwCc4MAKFpMloooIXruQ:Lz071uv4BPMkFfdgIZohteLMxRguKf

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks