Overview

overview

7

Static

static

7

da8910ae15...cs.exe

windows7-x64

7

da8910ae15...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    da8910ae1589604f351ee046272234a0_NeikiAnalytics

  • Size

    82KB

  • Sample

    240516-mf51csga8w

  • MD5

    da8910ae1589604f351ee046272234a0

  • SHA1

    0a665009463ada0887d8fa91bc1ecef5888dabae

  • SHA256

    736815151835c287ffecd92e7b24edf7458cba07f3dbd3c351e55eb7d33358e4

  • SHA512

    0eb8a060fa542969f8fe79587e5e85e4e2e9a5d7965393bbdf633d9873b07c1ee8c452aeba708f3245234358594c74ac4d332fa6cc2da92da0a97f9c9d3f36bb

  • SSDEEP

    768:XqNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZR1RGn8NIoJtR+beon:scNjQlsWjcd+xzl7SM+Gn82i+beon

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      da8910ae1589604f351ee046272234a0_NeikiAnalytics

    • Size

      82KB

    • MD5

      da8910ae1589604f351ee046272234a0

    • SHA1

      0a665009463ada0887d8fa91bc1ecef5888dabae

    • SHA256

      736815151835c287ffecd92e7b24edf7458cba07f3dbd3c351e55eb7d33358e4

    • SHA512

      0eb8a060fa542969f8fe79587e5e85e4e2e9a5d7965393bbdf633d9873b07c1ee8c452aeba708f3245234358594c74ac4d332fa6cc2da92da0a97f9c9d3f36bb

    • SSDEEP

      768:XqNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZR1RGn8NIoJtR+beon:scNjQlsWjcd+xzl7SM+Gn82i+beon

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks