Overview

overview

7

Static

static

3

5002d40136...cs.exe

windows7-x64

7

5002d40136...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5002d401362894404cd4b0e10197c920_NeikiAnalytics

  • Size

    1.3MB

  • Sample

    240510-c499wahe34

  • MD5

    5002d401362894404cd4b0e10197c920

  • SHA1

    682e6a8c3ef319b80c40be4f2798bdc8ceac331c

  • SHA256

    e91173ab0910c7d4bd9c7d6f07a6b2c00fd0b99e10fb2cf28e774be8d72a1215

  • SHA512

    244022613651e87c8b91ad0e033734656a36f438dca2bc514f39774c34d9592fea14dc29b260c681335e8759ceb9bf15ccc86cd9304a5f6342332dddd280292a

  • SSDEEP

    24576:3kuKnonEX7bHsMQ4/O6yMLprOInyT/Swl8Mi9:0uVEXvYMLprznyDSga9

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      5002d401362894404cd4b0e10197c920_NeikiAnalytics

    • Size

      1.3MB

    • MD5

      5002d401362894404cd4b0e10197c920

    • SHA1

      682e6a8c3ef319b80c40be4f2798bdc8ceac331c

    • SHA256

      e91173ab0910c7d4bd9c7d6f07a6b2c00fd0b99e10fb2cf28e774be8d72a1215

    • SHA512

      244022613651e87c8b91ad0e033734656a36f438dca2bc514f39774c34d9592fea14dc29b260c681335e8759ceb9bf15ccc86cd9304a5f6342332dddd280292a

    • SSDEEP

      24576:3kuKnonEX7bHsMQ4/O6yMLprOInyT/Swl8Mi9:0uVEXvYMLprznyDSga9

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks