Overview

overview

10

Static

static

10

368f53a5f3...cs.exe

windows7-x64

7

368f53a5f3...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    368f53a5f397ba108c81293f648e2480_NeikiAnalytics.exe

  • Size

    80KB

  • Sample

    240524-rnpessgh7y

  • MD5

    368f53a5f397ba108c81293f648e2480

  • SHA1

    77774a039399e5d5a9e184dbc7f1f4063cea54e9

  • SHA256

    e4e25a90ab5dbb5ee3acf91c2545ea0cbda455110f0ca01a0fa4e36bc3b251be

  • SHA512

    98914940b7c27d9ad3d06ff72082e5a08980735de612b4003717c1e9c11186d5b222f28b2f1c6205ce3698cff70006f637df2908d101f92304d298a410e8f1f9

  • SSDEEP

    1536:+QuEfLuCnhMemdroxG2h3sdxuaoFpaLO7QRsc/8e373C90CmuJd4BXL:rJfKCTmdroxGA8t2paLW5erYBbd45

Score
10/10
goziisfbupx

Malware Config

Extracted

Family

gozi

Targets

    • Target

      368f53a5f397ba108c81293f648e2480_NeikiAnalytics.exe

    • Size

      80KB

    • MD5

      368f53a5f397ba108c81293f648e2480

    • SHA1

      77774a039399e5d5a9e184dbc7f1f4063cea54e9

    • SHA256

      e4e25a90ab5dbb5ee3acf91c2545ea0cbda455110f0ca01a0fa4e36bc3b251be

    • SHA512

      98914940b7c27d9ad3d06ff72082e5a08980735de612b4003717c1e9c11186d5b222f28b2f1c6205ce3698cff70006f637df2908d101f92304d298a410e8f1f9

    • SSDEEP

      1536:+QuEfLuCnhMemdroxG2h3sdxuaoFpaLO7QRsc/8e373C90CmuJd4BXL:rJfKCTmdroxGA8t2paLW5erYBbd45

    Score
    7/10
    upx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks