Overview

overview

7

Static

static

3

0722d3b872...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0722d3b872784f66127eefc6ee101c90_NeikiAnalytics.exe

  • Size

    1.5MB

  • Sample

    240521-x6jvxsga7z

  • MD5

    0722d3b872784f66127eefc6ee101c90

  • SHA1

    4b2ff05e6f874ea761a45cd48f5e49f4c6c3ef3b

  • SHA256

    fc339c91336186ec062ae47e9de59f916cbe17baa094f62d81c0954d92f12d41

  • SHA512

    d9d268dc84dc3d8fe93fa33dbc55ec026aee0853cffc479798f5718665407fe330f5122032907afbc96604337ce36a243c496c532bb89ad34ec5d9bab22c38ad

  • SSDEEP

    12288:KSC3a03/pF6ue0NzWUhCLj+0t0b/SqpOcNAQgOADb/sHW6Ef+kB:KSC37PL6uJN6kCLj+0te0cNAz/sbk

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      0722d3b872784f66127eefc6ee101c90_NeikiAnalytics.exe

    • Size

      1.5MB

    • MD5

      0722d3b872784f66127eefc6ee101c90

    • SHA1

      4b2ff05e6f874ea761a45cd48f5e49f4c6c3ef3b

    • SHA256

      fc339c91336186ec062ae47e9de59f916cbe17baa094f62d81c0954d92f12d41

    • SHA512

      d9d268dc84dc3d8fe93fa33dbc55ec026aee0853cffc479798f5718665407fe330f5122032907afbc96604337ce36a243c496c532bb89ad34ec5d9bab22c38ad

    • SSDEEP

      12288:KSC3a03/pF6ue0NzWUhCLj+0t0b/SqpOcNAQgOADb/sHW6Ef+kB:KSC37PL6uJN6kCLj+0te0cNAz/sbk

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks