Overview

overview

7

Static

static

3

744140eca2...cs.exe

windows7-x64

7

744140eca2...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    744140eca24781d3263fbfa7f2d9edf0_NeikiAnalytics.exe

  • Size

    3.1MB

  • Sample

    240531-deebksdg86

  • MD5

    744140eca24781d3263fbfa7f2d9edf0

  • SHA1

    7ef34a6885653e9b36087fca96909a034eacb041

  • SHA256

    01d8d81a2c16541c4592bacb99f449af467ec72c4dccc86813e952ed950722d8

  • SHA512

    c6bdbc58fb87f4ef1e4bab6d442bffe0dbb1f19213e2f5d793b355e3480d085ee027a485fde091ee19d90f88d3f40bdce8d445dc8ae5fdd04b65df8ef3bc8ab1

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBnB/bSqz8:sxX7QnxrloE5dpUpQbVz8

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      744140eca24781d3263fbfa7f2d9edf0_NeikiAnalytics.exe

    • Size

      3.1MB

    • MD5

      744140eca24781d3263fbfa7f2d9edf0

    • SHA1

      7ef34a6885653e9b36087fca96909a034eacb041

    • SHA256

      01d8d81a2c16541c4592bacb99f449af467ec72c4dccc86813e952ed950722d8

    • SHA512

      c6bdbc58fb87f4ef1e4bab6d442bffe0dbb1f19213e2f5d793b355e3480d085ee027a485fde091ee19d90f88d3f40bdce8d445dc8ae5fdd04b65df8ef3bc8ab1

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBnB/bSqz8:sxX7QnxrloE5dpUpQbVz8

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks