Overview

overview

7

Static

static

3

144741e8a8...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    144741e8a8b41d34812273d3798fd630_NeikiAnalytics.exe

  • Size

    859KB

  • Sample

    240522-cqvx2ahc9w

  • MD5

    144741e8a8b41d34812273d3798fd630

  • SHA1

    c1f8eb5c338c07011760ee7a11e92e59ba10ee1c

  • SHA256

    2f58d91d01c4a6b85900cbdc72f834b16f5d1102a332a7bc8baf57f1d8b87db0

  • SHA512

    8c9f5b0265a151631f142528c82a5e4bcc77a4f61ef816a09a06fc33de1fb5550d74754b751b1fbe27dbbf8e49949269ea124984518a1467ff3addd2e12c59a7

  • SSDEEP

    24576:dCWh22PeGsiUTWuKk0fob0gEEVFQmic8WU:v22PesUyuFlIAFQmd8WU

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      144741e8a8b41d34812273d3798fd630_NeikiAnalytics.exe

    • Size

      859KB

    • MD5

      144741e8a8b41d34812273d3798fd630

    • SHA1

      c1f8eb5c338c07011760ee7a11e92e59ba10ee1c

    • SHA256

      2f58d91d01c4a6b85900cbdc72f834b16f5d1102a332a7bc8baf57f1d8b87db0

    • SHA512

      8c9f5b0265a151631f142528c82a5e4bcc77a4f61ef816a09a06fc33de1fb5550d74754b751b1fbe27dbbf8e49949269ea124984518a1467ff3addd2e12c59a7

    • SSDEEP

      24576:dCWh22PeGsiUTWuKk0fob0gEEVFQmic8WU:v22PesUyuFlIAFQmd8WU

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks