Overview

overview

7

Static

static

3

1db8fcb23e...cs.exe

windows7-x64

7

1db8fcb23e...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1db8fcb23ee7a8562e6b41d59ccaf190_NeikiAnalytics

  • Size

    1.3MB

  • Sample

    240515-x2q4faff7x

  • MD5

    1db8fcb23ee7a8562e6b41d59ccaf190

  • SHA1

    defd8a9f1f6ee4a74a34b6c582681e5d7aed958a

  • SHA256

    0820e85c0fbc707885b595e19217e598e3c13b942748bc11b99504a950afc4b4

  • SHA512

    15bc6d1629f61fa388e7cc2a0ba5999d78ab45ea0a0f5715be10f70aa0851d2bcb9ee7204a7481be14de70f674d48e91521919c3fa145333c3cc96c2bcfcb85a

  • SSDEEP

    12288:nzeNuRkV9PoA9u2G346gcGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgA6:zkuKnonit/sBlDqgZQd6XKtiMJYiPUE

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      1db8fcb23ee7a8562e6b41d59ccaf190_NeikiAnalytics

    • Size

      1.3MB

    • MD5

      1db8fcb23ee7a8562e6b41d59ccaf190

    • SHA1

      defd8a9f1f6ee4a74a34b6c582681e5d7aed958a

    • SHA256

      0820e85c0fbc707885b595e19217e598e3c13b942748bc11b99504a950afc4b4

    • SHA512

      15bc6d1629f61fa388e7cc2a0ba5999d78ab45ea0a0f5715be10f70aa0851d2bcb9ee7204a7481be14de70f674d48e91521919c3fa145333c3cc96c2bcfcb85a

    • SSDEEP

      12288:nzeNuRkV9PoA9u2G346gcGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgA6:zkuKnonit/sBlDqgZQd6XKtiMJYiPUE

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks