Overview

overview

10

Static

static

10

5da8b3e56b...cs.exe

windows7-x64

10

5da8b3e56b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5da8b3e56b9e4e2a4ed72cb658d66f80_NeikiAnalytics.exe

  • Size

    414KB

  • Sample

    240607-qzg97aaa52

  • MD5

    5da8b3e56b9e4e2a4ed72cb658d66f80

  • SHA1

    655946c4fe09406c14f8d47765b4a905a4dffd33

  • SHA256

    404541c7b4b167110edc24338dd08db78e50625ed41ea6a9466480e4898a4908

  • SHA512

    ce9ffceca149fbef162c74a7efbd6e4b430bd15dfab975b055bf7aadd948b46cad6b2fd4c05b78ab6f4e56f9286a647f0708c6dd43aa9627e113dbdf2cd4ff2e

  • SSDEEP

    3072:sr85CbLsGrA3rUds7VoBVTO3haxEvce0/tOXEtKk+oR/ClP9b/gLwziCMQ/WW2De:k93YwjTeOXRaR9bYLw5jutoYGp97Hl9

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      5da8b3e56b9e4e2a4ed72cb658d66f80_NeikiAnalytics.exe

    • Size

      414KB

    • MD5

      5da8b3e56b9e4e2a4ed72cb658d66f80

    • SHA1

      655946c4fe09406c14f8d47765b4a905a4dffd33

    • SHA256

      404541c7b4b167110edc24338dd08db78e50625ed41ea6a9466480e4898a4908

    • SHA512

      ce9ffceca149fbef162c74a7efbd6e4b430bd15dfab975b055bf7aadd948b46cad6b2fd4c05b78ab6f4e56f9286a647f0708c6dd43aa9627e113dbdf2cd4ff2e

    • SSDEEP

      3072:sr85CbLsGrA3rUds7VoBVTO3haxEvce0/tOXEtKk+oR/ClP9b/gLwziCMQ/WW2De:k93YwjTeOXRaR9bYLw5jutoYGp97Hl9

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks