Overview

overview

7

Static

static

3

05a00341a5...cs.exe

windows7-x64

7

05a00341a5...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    05a00341a529a8df1fd06ea314fc2880_NeikiAnalytics.exe

  • Size

    603KB

  • Sample

    240603-1g1c6ahg9t

  • MD5

    05a00341a529a8df1fd06ea314fc2880

  • SHA1

    df0bb499cf88dae84b8e3018f00ad2221dba2eef

  • SHA256

    eaef931c06f252994186bf0815b61eaed67fab3984e6a026943fe4a8d45b7cf6

  • SHA512

    13a279e517b7e4d2b43f17d58a3188bf51d619d3dbeaf3b79dd844793265d95dbe9def9520043ab07948b9b68305d81cecbd78ae6844e84b4dd083ebcbc5ae86

  • SSDEEP

    12288:JAvFPMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:JAvFkSkQ/7Gb8NLEbeZ

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      05a00341a529a8df1fd06ea314fc2880_NeikiAnalytics.exe

    • Size

      603KB

    • MD5

      05a00341a529a8df1fd06ea314fc2880

    • SHA1

      df0bb499cf88dae84b8e3018f00ad2221dba2eef

    • SHA256

      eaef931c06f252994186bf0815b61eaed67fab3984e6a026943fe4a8d45b7cf6

    • SHA512

      13a279e517b7e4d2b43f17d58a3188bf51d619d3dbeaf3b79dd844793265d95dbe9def9520043ab07948b9b68305d81cecbd78ae6844e84b4dd083ebcbc5ae86

    • SSDEEP

      12288:JAvFPMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:JAvFkSkQ/7Gb8NLEbeZ

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks