Overview

overview

7

Static

static

3

4f65432d8e...cs.exe

windows7-x64

1

4f65432d8e...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f65432d8ea5fff59aa20716035fc410_NeikiAnalytics.exe

  • Size

    8.2MB

  • Sample

    240529-lkpnhaac5x

  • MD5

    4f65432d8ea5fff59aa20716035fc410

  • SHA1

    d206ac93fc10e4d4ca9538ca3d124986a9a9b520

  • SHA256

    51e84de7e30a7f4ddec6c1c5199166fbfb66e285341a1a5932e48ea96081da3a

  • SHA512

    96cc7160008f277c0cf8778942db84f26b7148d51d1b3502e89f20d0a362c169f4704f5c6df40ee2d1b351e971bbe6e9bd056fe505d917181dfaec0c9d69bb57

  • SSDEEP

    98304:vKncL2GG3m1+T3UEDjCD57275SmXQdfOsHvZev1a75Kt:bL1G3m1KtDMC7U7sOZD7A

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      4f65432d8ea5fff59aa20716035fc410_NeikiAnalytics.exe

    • Size

      8.2MB

    • MD5

      4f65432d8ea5fff59aa20716035fc410

    • SHA1

      d206ac93fc10e4d4ca9538ca3d124986a9a9b520

    • SHA256

      51e84de7e30a7f4ddec6c1c5199166fbfb66e285341a1a5932e48ea96081da3a

    • SHA512

      96cc7160008f277c0cf8778942db84f26b7148d51d1b3502e89f20d0a362c169f4704f5c6df40ee2d1b351e971bbe6e9bd056fe505d917181dfaec0c9d69bb57

    • SSDEEP

      98304:vKncL2GG3m1+T3UEDjCD57275SmXQdfOsHvZev1a75Kt:bL1G3m1KtDMC7U7sOZD7A

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks