Overview

overview

7

Static

static

3

36ce2753a1...cs.exe

windows7-x64

7

36ce2753a1...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    36ce2753a15f3d160746ba0d44726ab0_NeikiAnalytics

  • Size

    1.3MB

  • Sample

    240511-zem5daba49

  • MD5

    36ce2753a15f3d160746ba0d44726ab0

  • SHA1

    aa3e5cba47b17534acb6733f50cb18fff53bb27a

  • SHA256

    a353cf790a5613ee725e7ae251fb31c2140d5fa90ef83d36bd4905d9178292f1

  • SHA512

    dd4387face0f27ed451278a20dab720369a4e61ba4d26a5625c124f5d14c5707a2fa8724eb396063e891c44cb4fe94bf4603a3dc6e1dd8f63df871caa93dcc28

  • SSDEEP

    24576:86mxIOnmR7nmOHhS6c8Xbh14ngVBES8v4gMD1r5NFLT3gZnYd6ihxDgp:5mz+LHmWh1QgVUGB3gZnDihx4

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      36ce2753a15f3d160746ba0d44726ab0_NeikiAnalytics

    • Size

      1.3MB

    • MD5

      36ce2753a15f3d160746ba0d44726ab0

    • SHA1

      aa3e5cba47b17534acb6733f50cb18fff53bb27a

    • SHA256

      a353cf790a5613ee725e7ae251fb31c2140d5fa90ef83d36bd4905d9178292f1

    • SHA512

      dd4387face0f27ed451278a20dab720369a4e61ba4d26a5625c124f5d14c5707a2fa8724eb396063e891c44cb4fe94bf4603a3dc6e1dd8f63df871caa93dcc28

    • SSDEEP

      24576:86mxIOnmR7nmOHhS6c8Xbh14ngVBES8v4gMD1r5NFLT3gZnYd6ihxDgp:5mz+LHmWh1QgVUGB3gZnDihx4

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks