Overview

overview

7

Static

static

3

3278db6bcb...cs.exe

windows7-x64

7

3278db6bcb...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3278db6bcb5c22339f24845bc6df2bf0_NeikiAnalytics.exe

  • Size

    592KB

  • Sample

    240528-e35dcafg23

  • MD5

    3278db6bcb5c22339f24845bc6df2bf0

  • SHA1

    3a143cf7a8b387fbf8ee774766ab8c7636ca3553

  • SHA256

    d4916968d352fbaf173f61f5376824db7083984c77b14db4108b2d7be2627ec3

  • SHA512

    2384843956e2cfbe14fc67b089ed6f757f90d1f4680dc66338891c28368052c57842cb1e605c3838f693c7b43d36dc54ea3b0060e5ca0c9cb74f0e8290bcc201

  • SSDEEP

    12288:RIMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:PSkQ/7Gb8NLEbeZ

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      3278db6bcb5c22339f24845bc6df2bf0_NeikiAnalytics.exe

    • Size

      592KB

    • MD5

      3278db6bcb5c22339f24845bc6df2bf0

    • SHA1

      3a143cf7a8b387fbf8ee774766ab8c7636ca3553

    • SHA256

      d4916968d352fbaf173f61f5376824db7083984c77b14db4108b2d7be2627ec3

    • SHA512

      2384843956e2cfbe14fc67b089ed6f757f90d1f4680dc66338891c28368052c57842cb1e605c3838f693c7b43d36dc54ea3b0060e5ca0c9cb74f0e8290bcc201

    • SSDEEP

      12288:RIMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:PSkQ/7Gb8NLEbeZ

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks