General
-
Target
6ce0716c080aba7c27cff52d9b8ced20_NeikiAnalytics.exe
-
Size
748KB
-
Sample
240530-3fkx7afa73
-
MD5
6ce0716c080aba7c27cff52d9b8ced20
-
SHA1
343812c4a2387f07012a99af9de486849a4f4491
-
SHA256
fb5626aa0b14484f382fddb614ddd4e5778be51be30e71d3576182d284618227
-
SHA512
49a1e1a1c8a775256de921f3c6fdc330fe1095ff03102d3651dbf0c8a6006884b3fd8b4fcf3b8f3860f71b60c08ab04b61573c85ffd083659dd89ef8a5e73c1e
-
SSDEEP
12288:NusT4cgRdrEAzvHG4zhsT4cgRdrEAzvHG4zj4Btw2YPRKOu7b6WF6:NusGRdrEAbm4zhsGRdrEAbm4zj4BGTuw
Malware Config
Extracted
formbook
4.1
rc2i
gdhuadong.icu
girls-at-a.click
income.rocks
immobilientopclub.immo
frigologs.net
dominohome.store
lowestedt.motorcycles
purplesoul18.asia
fashiontochic.net
jpvalettrash.com
rgvneckpain.com
brainstormingpartner.com
xvwk.asia
universalnikko.com
3887788a2.top
militarysextv.com
xxysocial.com
coachbycoach.com
caregivergrantsfindonline.today
kimetsumatrix.com
Targets
-
-
Target
6ce0716c080aba7c27cff52d9b8ced20_NeikiAnalytics.exe
-
Size
748KB
-
MD5
6ce0716c080aba7c27cff52d9b8ced20
-
SHA1
343812c4a2387f07012a99af9de486849a4f4491
-
SHA256
fb5626aa0b14484f382fddb614ddd4e5778be51be30e71d3576182d284618227
-
SHA512
49a1e1a1c8a775256de921f3c6fdc330fe1095ff03102d3651dbf0c8a6006884b3fd8b4fcf3b8f3860f71b60c08ab04b61573c85ffd083659dd89ef8a5e73c1e
-
SSDEEP
12288:NusT4cgRdrEAzvHG4zhsT4cgRdrEAzvHG4zj4Btw2YPRKOu7b6WF6:NusGRdrEAbm4zhsGRdrEAbm4zj4BGTuw
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-