Overview

overview

7

Static

static

3

2411074705...cs.exe

windows7-x64

7

2411074705...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2411074705ca64188774ab2058d8cb80_NeikiAnalytics

  • Size

    3.1MB

  • Sample

    240511-wdk2vacg66

  • MD5

    2411074705ca64188774ab2058d8cb80

  • SHA1

    1eca8cdf1b8b5c0b590d55b22889ecba48e4c024

  • SHA256

    3f24cd1cc71ce3db1e986f5ed8adfbd6ad6dee2c7a3003dddc750395a73e507b

  • SHA512

    fa7090f1ce2b5bb2a3b1d97660d7ac742f6c0554be55eb934ef9579a21ac85a1516dac9a919e624ba9b5bbe93f9b3c5a3330e599de844425d0215216cc6f2c0a

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB6B/bSqz8b6LNXJqI20:sxX7QnxrloE5dpUpJbVz8eLFcz

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2411074705ca64188774ab2058d8cb80_NeikiAnalytics

    • Size

      3.1MB

    • MD5

      2411074705ca64188774ab2058d8cb80

    • SHA1

      1eca8cdf1b8b5c0b590d55b22889ecba48e4c024

    • SHA256

      3f24cd1cc71ce3db1e986f5ed8adfbd6ad6dee2c7a3003dddc750395a73e507b

    • SHA512

      fa7090f1ce2b5bb2a3b1d97660d7ac742f6c0554be55eb934ef9579a21ac85a1516dac9a919e624ba9b5bbe93f9b3c5a3330e599de844425d0215216cc6f2c0a

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB6B/bSqz8b6LNXJqI20:sxX7QnxrloE5dpUpJbVz8eLFcz

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks