Overview

overview

7

Static

static

3

4b05f3f6e2...cs.exe

windows7-x64

7

4b05f3f6e2...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b05f3f6e2e270d40298979eb91e6140_NeikiAnalytics

  • Size

    1.3MB

  • Sample

    240515-afhtlsfd4t

  • MD5

    4b05f3f6e2e270d40298979eb91e6140

  • SHA1

    c6de29ba99d50382370afc6e552650ee7fbc972b

  • SHA256

    7033bc17a7b9a75ee2ce83f54037b2fd495f3208b5ec62b8d4eda4a4a68cc11d

  • SHA512

    67d53533a6e12a809a402401dc2ed1d8b2bc521036df6981105bce5588c6a52db234f6b46cbe53770d187267527a1d5dd1a0b072a3e965ad35ca2a14415f45c3

  • SSDEEP

    24576:86PsBf9ygaHUSjhgjnBSIy0M5GLhqOXIoFpsujld2R33mUOrShGbeqUCLQ:5Payg0+lSpfZOXIoFT43AeGaqPM

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      4b05f3f6e2e270d40298979eb91e6140_NeikiAnalytics

    • Size

      1.3MB

    • MD5

      4b05f3f6e2e270d40298979eb91e6140

    • SHA1

      c6de29ba99d50382370afc6e552650ee7fbc972b

    • SHA256

      7033bc17a7b9a75ee2ce83f54037b2fd495f3208b5ec62b8d4eda4a4a68cc11d

    • SHA512

      67d53533a6e12a809a402401dc2ed1d8b2bc521036df6981105bce5588c6a52db234f6b46cbe53770d187267527a1d5dd1a0b072a3e965ad35ca2a14415f45c3

    • SSDEEP

      24576:86PsBf9ygaHUSjhgjnBSIy0M5GLhqOXIoFpsujld2R33mUOrShGbeqUCLQ:5Payg0+lSpfZOXIoFT43AeGaqPM

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks