Overview

overview

10

Static

static

3

b79b7b8b7f...cs.exe

windows7-x64

10

b79b7b8b7f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b79b7b8b7fd47558c30cc131662f84b0_NeikiAnalytics.exe

  • Size

    143KB

  • Sample

    240520-f1zwhsea5t

  • MD5

    b79b7b8b7fd47558c30cc131662f84b0

  • SHA1

    2c851510658c29fdb573aa804c63ef9ad1f6eff8

  • SHA256

    6f10bbba6ff94869588ef5b18200b51937040273404f7422b268aecae5b96d3c

  • SHA512

    8d21fc3da8e303c1ab700e07468cc3c6d6ac40ba0206790c32697099eca9ec4e51a1e5c35361746d7720fbd0d1e3eb10a3c38d38831beff228da0e5f08a09efa

  • SSDEEP

    3072:zr8WDrCtaN2gVNR3IJb5OSiYqilJYJsM3Nv71NnZbD3u7BxeJBa7H3JmRSsmEzWe:PugN2gVNR3WiliVM3ND1NnZ33u7BxuBN

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      b79b7b8b7fd47558c30cc131662f84b0_NeikiAnalytics.exe

    • Size

      143KB

    • MD5

      b79b7b8b7fd47558c30cc131662f84b0

    • SHA1

      2c851510658c29fdb573aa804c63ef9ad1f6eff8

    • SHA256

      6f10bbba6ff94869588ef5b18200b51937040273404f7422b268aecae5b96d3c

    • SHA512

      8d21fc3da8e303c1ab700e07468cc3c6d6ac40ba0206790c32697099eca9ec4e51a1e5c35361746d7720fbd0d1e3eb10a3c38d38831beff228da0e5f08a09efa

    • SSDEEP

      3072:zr8WDrCtaN2gVNR3IJb5OSiYqilJYJsM3Nv71NnZbD3u7BxeJBa7H3JmRSsmEzWe:PugN2gVNR3WiliVM3ND1NnZ33u7BxuBN

    Score
    10/10
    neshtapersistencespywarestealer

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks