General
-
Target
0afb52048ad8675d1446589f2ca050a0_NeikiAnalytics.exe
-
Size
2.4MB
-
Sample
240525-xedvlaea8v
-
MD5
0afb52048ad8675d1446589f2ca050a0
-
SHA1
2cf4d80837c5f45069086ab322418426a6b9a51d
-
SHA256
9ed3b32cf32133e2d698b17fc0dfefddc6a3e68edb70a052a5fe5c1bc7491aa9
-
SHA512
7a69d35322cdfbb1b89eb7afb5622e35915f446fb37b77a53d26856020b312d144663a71c6788b523f4650a26824c8e888d41aa541e0db01d188cef78108bde1
-
SSDEEP
24576:Pm/Sj801I+zd34OOtWqv3ciWmxMg4w1v8QWgW2pNX0fqk27NoFo3t4aO78KLHidC:u/SQARUt/SyV8QC2jiqkumct498KLHi
Static task
static1
Behavioral task
behavioral1
Sample
0afb52048ad8675d1446589f2ca050a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199686524322
https://t.me/k0mono
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15 Ddg/17.4.1
Targets
-
-
Target
0afb52048ad8675d1446589f2ca050a0_NeikiAnalytics.exe
-
Size
2.4MB
-
MD5
0afb52048ad8675d1446589f2ca050a0
-
SHA1
2cf4d80837c5f45069086ab322418426a6b9a51d
-
SHA256
9ed3b32cf32133e2d698b17fc0dfefddc6a3e68edb70a052a5fe5c1bc7491aa9
-
SHA512
7a69d35322cdfbb1b89eb7afb5622e35915f446fb37b77a53d26856020b312d144663a71c6788b523f4650a26824c8e888d41aa541e0db01d188cef78108bde1
-
SSDEEP
24576:Pm/Sj801I+zd34OOtWqv3ciWmxMg4w1v8QWgW2pNX0fqk27NoFo3t4aO78KLHidC:u/SQARUt/SyV8QC2jiqkumct498KLHi
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-