Overview

overview

7

Static

static

3

188f40bfea...cs.exe

windows7-x64

7

188f40bfea...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    188f40bfea25a5abc2fbc04726c48b50_NeikiAnalytics.exe

  • Size

    5.4MB

  • Sample

    240522-egqcasbc69

  • MD5

    188f40bfea25a5abc2fbc04726c48b50

  • SHA1

    a149ca81a29903f08177dd3e6958956ac2d11ff0

  • SHA256

    dbff8e2fd94454389291499681208cdfdbd3ec219ea94c7af0b5575729d48c54

  • SHA512

    ffba3de37c73c9530fd7ace76bc6ee54f7b0801f719d6c3c1ba090d6b9220913cb24e1feb6687e84db8e7e0b19e5828ab5737e5631c05895e4566a3787fad806

  • SSDEEP

    98304:huLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0h:47wq1W6HqULS8djZDTaNNeCKVP5ORsgK

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      188f40bfea25a5abc2fbc04726c48b50_NeikiAnalytics.exe

    • Size

      5.4MB

    • MD5

      188f40bfea25a5abc2fbc04726c48b50

    • SHA1

      a149ca81a29903f08177dd3e6958956ac2d11ff0

    • SHA256

      dbff8e2fd94454389291499681208cdfdbd3ec219ea94c7af0b5575729d48c54

    • SHA512

      ffba3de37c73c9530fd7ace76bc6ee54f7b0801f719d6c3c1ba090d6b9220913cb24e1feb6687e84db8e7e0b19e5828ab5737e5631c05895e4566a3787fad806

    • SSDEEP

      98304:huLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0h:47wq1W6HqULS8djZDTaNNeCKVP5ORsgK

    Score
    7/10
    spywarestealerdiscovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks