Overview

overview

7

Static

static

3

6e18e6fa0b...cs.exe

windows7-x64

7

6e18e6fa0b...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e18e6fa0bfa68be90bf7535d1ed91e0_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240523-bx637sgf9y

  • MD5

    6e18e6fa0bfa68be90bf7535d1ed91e0

  • SHA1

    05ed49add0b6a071201929c2e26868ba36d2c0b6

  • SHA256

    4df5059e758764c8cbc29e76eeab1d50bcb3495b7eb667317f2746d7c26ee79d

  • SHA512

    3c24e0336732148043f45c86da2a5ea2993678f967371a74e7864b96704674f259a0d4d790b535a861f09a521a50e66f735458f60fad89505c584da9cef392c4

  • SSDEEP

    12288:GWPrGxzQ9TA1ubv6IQ3FMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:GWzGxmsmSkQ/7Gb8NLEbeZ

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      6e18e6fa0bfa68be90bf7535d1ed91e0_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      6e18e6fa0bfa68be90bf7535d1ed91e0

    • SHA1

      05ed49add0b6a071201929c2e26868ba36d2c0b6

    • SHA256

      4df5059e758764c8cbc29e76eeab1d50bcb3495b7eb667317f2746d7c26ee79d

    • SHA512

      3c24e0336732148043f45c86da2a5ea2993678f967371a74e7864b96704674f259a0d4d790b535a861f09a521a50e66f735458f60fad89505c584da9cef392c4

    • SSDEEP

      12288:GWPrGxzQ9TA1ubv6IQ3FMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:GWzGxmsmSkQ/7Gb8NLEbeZ

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks