Overview

overview

7

Static

static

3

7e734f61fd...cs.exe

windows7-x64

7

7e734f61fd...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e734f61fdf9966185384f5fa0ed88c0_NeikiAnalytics

  • Size

    1.5MB

  • Sample

    240512-jhlgyseh6z

  • MD5

    7e734f61fdf9966185384f5fa0ed88c0

  • SHA1

    1fdfb5bedfd38f890fc40704fcb3d95dfce4ca10

  • SHA256

    9101f423b39d946e9d8a2416386332dfe49a55c9097063e755812d74c63bf173

  • SHA512

    3318ddf33fac275c0698c89c1399219788d35c7f671b4a86e5635fd3553e28efae13062e0876ce752881b03fa3cb7ee0cc81b3b7297e04517d4928da71fae516

  • SSDEEP

    24576:XUhiHOez8rin3thL/aHsK+fM2jEaNZBqoeW7V6tGLfHtqls+0:EhiHQrothL/ksDM2jh3BqS7YtGL/Als

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      7e734f61fdf9966185384f5fa0ed88c0_NeikiAnalytics

    • Size

      1.5MB

    • MD5

      7e734f61fdf9966185384f5fa0ed88c0

    • SHA1

      1fdfb5bedfd38f890fc40704fcb3d95dfce4ca10

    • SHA256

      9101f423b39d946e9d8a2416386332dfe49a55c9097063e755812d74c63bf173

    • SHA512

      3318ddf33fac275c0698c89c1399219788d35c7f671b4a86e5635fd3553e28efae13062e0876ce752881b03fa3cb7ee0cc81b3b7297e04517d4928da71fae516

    • SSDEEP

      24576:XUhiHOez8rin3thL/aHsK+fM2jEaNZBqoeW7V6tGLfHtqls+0:EhiHQrothL/ksDM2jh3BqS7YtGL/Als

    Score
    7/10
    spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks