Overview

overview

7

Static

static

7

4685d088cc...cs.exe

windows7-x64

7

4685d088cc...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4685d088ccd75860fad35901fddc2160_NeikiAnalytics.exe

  • Size

    27KB

  • Sample

    240522-1v317sad4x

  • MD5

    4685d088ccd75860fad35901fddc2160

  • SHA1

    b57e44f2cc6deaf310aecba33ce149e4aaf9a4a3

  • SHA256

    de3c65aaf40957c310d81133f0f26992e8a5bf12c60785baf1018de38a85521e

  • SHA512

    7a690fd0848c90db06082bd8ca5f6d3bdfc6ae39ec7991009eb8e492f4efea7e2622037adc842da02c3a61a0bd33a437b2b218e32b0a785918ff69b901a95448

  • SSDEEP

    768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMx:N5VzcfA/6LrVpL74gfh16nx

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      4685d088ccd75860fad35901fddc2160_NeikiAnalytics.exe

    • Size

      27KB

    • MD5

      4685d088ccd75860fad35901fddc2160

    • SHA1

      b57e44f2cc6deaf310aecba33ce149e4aaf9a4a3

    • SHA256

      de3c65aaf40957c310d81133f0f26992e8a5bf12c60785baf1018de38a85521e

    • SHA512

      7a690fd0848c90db06082bd8ca5f6d3bdfc6ae39ec7991009eb8e492f4efea7e2622037adc842da02c3a61a0bd33a437b2b218e32b0a785918ff69b901a95448

    • SSDEEP

      768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMx:N5VzcfA/6LrVpL74gfh16nx

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks