General
-
Target
b600b69316faec4bd18c8dd4dae739e0_NeikiAnalytics.exe
-
Size
2.1MB
-
Sample
240525-bx5v5sab93
-
MD5
b600b69316faec4bd18c8dd4dae739e0
-
SHA1
e9c5261ea5f811781cde0e2ac3dd5dde113ce530
-
SHA256
52d3d4e6f7e6f2727616ffbe6fac7a57fc8399ee2ab2c53f342a94ac121c47a7
-
SHA512
7335677a312224da90411a6df7bcd0b9a4bb0a30e0c26ce032323d2c54cf19951a9db5771162d42181aa954d33408ba58809caf943bda84d4c5b7a7b429b6ff0
-
SSDEEP
49152:N6uDuaS9refioJtTF+TxMoxc1TU+j+dAzGwlrh:N6uKb9HotIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
b600b69316faec4bd18c8dd4dae739e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
b600b69316faec4bd18c8dd4dae739e0_NeikiAnalytics.exe
-
Size
2.1MB
-
MD5
b600b69316faec4bd18c8dd4dae739e0
-
SHA1
e9c5261ea5f811781cde0e2ac3dd5dde113ce530
-
SHA256
52d3d4e6f7e6f2727616ffbe6fac7a57fc8399ee2ab2c53f342a94ac121c47a7
-
SHA512
7335677a312224da90411a6df7bcd0b9a4bb0a30e0c26ce032323d2c54cf19951a9db5771162d42181aa954d33408ba58809caf943bda84d4c5b7a7b429b6ff0
-
SSDEEP
49152:N6uDuaS9refioJtTF+TxMoxc1TU+j+dAzGwlrh:N6uKb9HotIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-