Overview

overview

7

Static

static

3

1cc570b698...cs.exe

windows7-x64

7

1cc570b698...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1cc570b6984c2fe0338dd5f7d1f773b0_NeikiAnalytics

  • Size

    893KB

  • Sample

    240509-m85v3aec8t

  • MD5

    1cc570b6984c2fe0338dd5f7d1f773b0

  • SHA1

    77217ddccc9c1c95a884bc610fa9903f179e9f50

  • SHA256

    cd273cb7f87e9ccc44f12ace2c8b2019ab80671cd345c487f409ebabf586cb9c

  • SHA512

    59fc9a1871726d3e8b07e88df9ab2f43546e6d3ed1f95e32348261a54169db326ae3a93961f563f1f0ba770a7dae2d96d10e9cc55420c7c366fb51cebb57109e

  • SSDEEP

    12288:oGHasii9Bu36zs66QKYUtZyeGE8qXnTmxdX07uuNeg/dDRJaWQbWsQTahe/+qyk0:86u76nKJuFunyXshNj/dDRqbgehe/XBS

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      1cc570b6984c2fe0338dd5f7d1f773b0_NeikiAnalytics

    • Size

      893KB

    • MD5

      1cc570b6984c2fe0338dd5f7d1f773b0

    • SHA1

      77217ddccc9c1c95a884bc610fa9903f179e9f50

    • SHA256

      cd273cb7f87e9ccc44f12ace2c8b2019ab80671cd345c487f409ebabf586cb9c

    • SHA512

      59fc9a1871726d3e8b07e88df9ab2f43546e6d3ed1f95e32348261a54169db326ae3a93961f563f1f0ba770a7dae2d96d10e9cc55420c7c366fb51cebb57109e

    • SSDEEP

      12288:oGHasii9Bu36zs66QKYUtZyeGE8qXnTmxdX07uuNeg/dDRJaWQbWsQTahe/+qyk0:86u76nKJuFunyXshNj/dDRqbgehe/XBS

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks