Overview

overview

7

Static

static

3

77b63b6197...cs.exe

windows7-x64

7

77b63b6197...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    77b63b61977d411b8bb4262e6b39fac0_NeikiAnalytics.exe

  • Size

    3.0MB

  • Sample

    240526-gq7n2sab36

  • MD5

    77b63b61977d411b8bb4262e6b39fac0

  • SHA1

    00de5e937f77d9085a33cb4fb9cce7da08166ebd

  • SHA256

    bd509ef854f7af9e271e6ee761a03289d937d399864948706d765aeb4dea533c

  • SHA512

    b0f43a4958b5b3ae725d2a14ffeb933f5ec03a4c977a0db00a9844fe372cbaf0eaa20f95ba42220172cfe0fe9268dd04284252c673c9e849cbcd547f55db2d85

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBsB/bSqz8b6LNX:sxX7QnxrloE5dpUpnbVz8eLF

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      77b63b61977d411b8bb4262e6b39fac0_NeikiAnalytics.exe

    • Size

      3.0MB

    • MD5

      77b63b61977d411b8bb4262e6b39fac0

    • SHA1

      00de5e937f77d9085a33cb4fb9cce7da08166ebd

    • SHA256

      bd509ef854f7af9e271e6ee761a03289d937d399864948706d765aeb4dea533c

    • SHA512

      b0f43a4958b5b3ae725d2a14ffeb933f5ec03a4c977a0db00a9844fe372cbaf0eaa20f95ba42220172cfe0fe9268dd04284252c673c9e849cbcd547f55db2d85

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBsB/bSqz8b6LNX:sxX7QnxrloE5dpUpnbVz8eLF

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks