Overview

overview

7

Static

static

3

4fc5eb5d6c...cs.exe

windows7-x64

7

4fc5eb5d6c...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4fc5eb5d6cf6d26117430f467a3cda10_NeikiAnalytics.exe

  • Size

    2.6MB

  • Sample

    240524-3kjkxsfc82

  • MD5

    4fc5eb5d6cf6d26117430f467a3cda10

  • SHA1

    f2f1e245ea9d9e511335ea2d88911bf2b512126e

  • SHA256

    705a1549ef319f02d3781d87039ecde155126ade01300de7608b1866660470f9

  • SHA512

    ec3d24725c66d56a1e6e67b501bddfe3baed2416e4bd573e10ba294666ca6c80722189758c16e9a78b5542a407da6e724659bf13a568c300e5b62d3ec6d804d7

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBWB/bS:sxX7QnxrloE5dpUpZb

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      4fc5eb5d6cf6d26117430f467a3cda10_NeikiAnalytics.exe

    • Size

      2.6MB

    • MD5

      4fc5eb5d6cf6d26117430f467a3cda10

    • SHA1

      f2f1e245ea9d9e511335ea2d88911bf2b512126e

    • SHA256

      705a1549ef319f02d3781d87039ecde155126ade01300de7608b1866660470f9

    • SHA512

      ec3d24725c66d56a1e6e67b501bddfe3baed2416e4bd573e10ba294666ca6c80722189758c16e9a78b5542a407da6e724659bf13a568c300e5b62d3ec6d804d7

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBWB/bS:sxX7QnxrloE5dpUpZb

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks