Overview

overview

10

Static

static

10

ad90d678df...cs.exe

windows7-x64

10

ad90d678df...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad90d678df052039ee4fcf2c7e98fd14e8a6c1ff419972c7cee865da40e5747f_NeikiAnalytics.exe

  • Size

    2.1MB

  • Sample

    240629-qt8vys1gjq

  • MD5

    da23d9d92eac93d14111646ac1159580

  • SHA1

    afa0b3ffe520dbe4e4d292bf1f9e550b2773e9be

  • SHA256

    ad90d678df052039ee4fcf2c7e98fd14e8a6c1ff419972c7cee865da40e5747f

  • SHA512

    e2b58c74d7700cd997417fe841a21e2cc799eb6da666bc5173087b719f6b77289d1bd072121feb2dd49e6bfc410f2422ff6ef0fb94d1498ec6a79b0a71022b7e

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2ru2:GemTLkNdfE0pZaQ/

Score
10/10
kpotxmrigminerstealertrojan

Malware Config

Targets

    • Target

      ad90d678df052039ee4fcf2c7e98fd14e8a6c1ff419972c7cee865da40e5747f_NeikiAnalytics.exe

    • Size

      2.1MB

    • MD5

      da23d9d92eac93d14111646ac1159580

    • SHA1

      afa0b3ffe520dbe4e4d292bf1f9e550b2773e9be

    • SHA256

      ad90d678df052039ee4fcf2c7e98fd14e8a6c1ff419972c7cee865da40e5747f

    • SHA512

      e2b58c74d7700cd997417fe841a21e2cc799eb6da666bc5173087b719f6b77289d1bd072121feb2dd49e6bfc410f2422ff6ef0fb94d1498ec6a79b0a71022b7e

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/FYqOc2ru2:GemTLkNdfE0pZaQ/

    Score
    10/10
    kpotxmrigminerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks