Overview

overview

10

Static

static

10

36b0fce66c...cs.exe

windows7-x64

10

36b0fce66c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36b0fce66c64716815a1db1fe5760cb40e0c20a3cdd98734c3c7f3b54bc416a4_NeikiAnalytics.exe

  • Size

    1.5MB

  • Sample

    240701-fg1cyazerp

  • MD5

    c13eb1c731a3a76700267a528b4c0a00

  • SHA1

    d7d0f27316f1cb2bb4f8838ee0a7dcc20e864b2b

  • SHA256

    36b0fce66c64716815a1db1fe5760cb40e0c20a3cdd98734c3c7f3b54bc416a4

  • SHA512

    a45fbc6d8b6e11262f82fb0478aeba5f46910accf721e7ae9ca836bf0a651d7ac30718966864582bd5cfd7210c475b55c25e02fc6d25cdb6db73e26aa20d16f3

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+sEDm1xzU:ROdWCCi7/raZ5aIwC+Agr6SNasrsQm7U

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      36b0fce66c64716815a1db1fe5760cb40e0c20a3cdd98734c3c7f3b54bc416a4_NeikiAnalytics.exe

    • Size

      1.5MB

    • MD5

      c13eb1c731a3a76700267a528b4c0a00

    • SHA1

      d7d0f27316f1cb2bb4f8838ee0a7dcc20e864b2b

    • SHA256

      36b0fce66c64716815a1db1fe5760cb40e0c20a3cdd98734c3c7f3b54bc416a4

    • SHA512

      a45fbc6d8b6e11262f82fb0478aeba5f46910accf721e7ae9ca836bf0a651d7ac30718966864582bd5cfd7210c475b55c25e02fc6d25cdb6db73e26aa20d16f3

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+sEDm1xzU:ROdWCCi7/raZ5aIwC+Agr6SNasrsQm7U

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks