Overview

overview

7

Static

static

7

45eea57c1d...cs.exe

windows7-x64

7

45eea57c1d...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    45eea57c1d813d15485f205802e7a890_NeikiAnalytics.exe

  • Size

    80KB

  • Sample

    240529-f7keeaca2y

  • MD5

    45eea57c1d813d15485f205802e7a890

  • SHA1

    7b3b2e7229e7dbb8c589ec4846815ac8ebee4a51

  • SHA256

    8944cb3390dd0810bc60e4674c694a0d23c4ed785bb5aa43e7491537d6e38167

  • SHA512

    de30abe959f0ab8319e0c7eb609409d9c44a7860e59b2643cf3e853d1999ae21248f3915b2a0df780b1fdf827bef64abca6f6309d99a4ceb119928958b5a7fad

  • SSDEEP

    768:XUTNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZR1RGbLLRNeoP:kzcNjQlsWjcd+xzl7SM+Gb5NeoP

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      45eea57c1d813d15485f205802e7a890_NeikiAnalytics.exe

    • Size

      80KB

    • MD5

      45eea57c1d813d15485f205802e7a890

    • SHA1

      7b3b2e7229e7dbb8c589ec4846815ac8ebee4a51

    • SHA256

      8944cb3390dd0810bc60e4674c694a0d23c4ed785bb5aa43e7491537d6e38167

    • SHA512

      de30abe959f0ab8319e0c7eb609409d9c44a7860e59b2643cf3e853d1999ae21248f3915b2a0df780b1fdf827bef64abca6f6309d99a4ceb119928958b5a7fad

    • SSDEEP

      768:XUTNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZR1RGbLLRNeoP:kzcNjQlsWjcd+xzl7SM+Gb5NeoP

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks