Overview

overview

7

Static

static

7

bbf26f2960...cs.exe

windows7-x64

7

bbf26f2960...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bbf26f296069a1de11fc8c5f4de0ee00_NeikiAnalytics

  • Size

    27KB

  • Sample

    240510-lttntabb72

  • MD5

    bbf26f296069a1de11fc8c5f4de0ee00

  • SHA1

    d4693398a1307d24c742242ee843ff0608a42f78

  • SHA256

    891430dfa1178b520eef1ee411b63844b9a0547fb77240c08f76a8185f0d37ca

  • SHA512

    31b10c8c8bd45d1af8366c8b8f062f4ddf8dba6e07ba2d8fbcf9da3bd2b24b47d059ff8b2be59d717c5a90413655bba56fdc43491a811e4c1bb7212997451a2d

  • SSDEEP

    768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMi:N5VzcfA/6LrVpL74gfh16ni

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      bbf26f296069a1de11fc8c5f4de0ee00_NeikiAnalytics

    • Size

      27KB

    • MD5

      bbf26f296069a1de11fc8c5f4de0ee00

    • SHA1

      d4693398a1307d24c742242ee843ff0608a42f78

    • SHA256

      891430dfa1178b520eef1ee411b63844b9a0547fb77240c08f76a8185f0d37ca

    • SHA512

      31b10c8c8bd45d1af8366c8b8f062f4ddf8dba6e07ba2d8fbcf9da3bd2b24b47d059ff8b2be59d717c5a90413655bba56fdc43491a811e4c1bb7212997451a2d

    • SSDEEP

      768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMi:N5VzcfA/6LrVpL74gfh16ni

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks