General
-
Target
c0bbb0a9717aaa97477fcc6763cb8640_NeikiAnalytics.exe
-
Size
163KB
-
Sample
240520-gt11nseg94
-
MD5
c0bbb0a9717aaa97477fcc6763cb8640
-
SHA1
d82b4cad4f0662b2b1370fb3743a96609488a28e
-
SHA256
3dc6fc399a22c53ec6af61ec2e2c46631ab1f363a26435bee68060e1a16f354f
-
SHA512
91fd3b8ad07ba746c8b009b0f2fdb2ee28dcc0cfbb507534ee87c644ff3397e72b60fff2bd51b1be815f23d2bb8df9851801538d1baeab0c6a1e715c5f428ee7
-
SSDEEP
1536:PFkJ+u2OzD68mKQSGoiXcsGFRLFlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Nfu2OPT+SuMHLFltOrWKDBr+yJb
Static task
static1
Behavioral task
behavioral1
Sample
c0bbb0a9717aaa97477fcc6763cb8640_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c0bbb0a9717aaa97477fcc6763cb8640_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gozi
Targets
-
-
Target
c0bbb0a9717aaa97477fcc6763cb8640_NeikiAnalytics.exe
-
Size
163KB
-
MD5
c0bbb0a9717aaa97477fcc6763cb8640
-
SHA1
d82b4cad4f0662b2b1370fb3743a96609488a28e
-
SHA256
3dc6fc399a22c53ec6af61ec2e2c46631ab1f363a26435bee68060e1a16f354f
-
SHA512
91fd3b8ad07ba746c8b009b0f2fdb2ee28dcc0cfbb507534ee87c644ff3397e72b60fff2bd51b1be815f23d2bb8df9851801538d1baeab0c6a1e715c5f428ee7
-
SSDEEP
1536:PFkJ+u2OzD68mKQSGoiXcsGFRLFlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Nfu2OPT+SuMHLFltOrWKDBr+yJb
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-