Overview

overview

7

Static

static

7

6f66f1b369...cs.exe

windows7-x64

7

6f66f1b369...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f66f1b36973fdf48ffc35f9743184d0_NeikiAnalytics

  • Size

    80KB

  • Sample

    240510-e7nw6aef32

  • MD5

    6f66f1b36973fdf48ffc35f9743184d0

  • SHA1

    bc0f2b647e6c72da8bacc4bfd502734730eea04f

  • SHA256

    0b2e5f0f0c933473d79d908622f6966bd54661f92462e50c00c3dccc5f9a7412

  • SHA512

    15f94b45d0f3e0cf145af5e52a8a876ec9bdaa10c85dea98481ab9ab5906d4cca9d3d8c00db1f6109c1ed61b883c061c0808af1eafbcc986cab6f8b5ef4a4827

  • SSDEEP

    768:XUTNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZR1RGbLLRNeoB:kzcNjQlsWjcd+xzl7SM+Gb5NeoB

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      6f66f1b36973fdf48ffc35f9743184d0_NeikiAnalytics

    • Size

      80KB

    • MD5

      6f66f1b36973fdf48ffc35f9743184d0

    • SHA1

      bc0f2b647e6c72da8bacc4bfd502734730eea04f

    • SHA256

      0b2e5f0f0c933473d79d908622f6966bd54661f92462e50c00c3dccc5f9a7412

    • SHA512

      15f94b45d0f3e0cf145af5e52a8a876ec9bdaa10c85dea98481ab9ab5906d4cca9d3d8c00db1f6109c1ed61b883c061c0808af1eafbcc986cab6f8b5ef4a4827

    • SSDEEP

      768:XUTNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZR1RGbLLRNeoB:kzcNjQlsWjcd+xzl7SM+Gb5NeoB

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks