Overview

overview

7

Static

static

3

7d9275bc05...cs.exe

windows7-x64

7

7d9275bc05...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d9275bc0599879ca7877408959bc9c0_NeikiAnalytics.exe

  • Size

    3.6MB

  • Sample

    240608-p259csbg71

  • MD5

    7d9275bc0599879ca7877408959bc9c0

  • SHA1

    47104c9ac31f181b0a10e03a88a3c5ed57c2a658

  • SHA256

    1076c7347822c6ab5645edccf927fc6c63a2d73af365bffa660c88344a1609b2

  • SHA512

    6593187e010974d41cdb76c7a5ed6acfd92cd4b9cea5b2a6925e41487aa7d44451ffbc762fbc18cda6e45034810bf54f4d55d94259acdb2542fc6713ce99b7f8

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBpB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpGbVz8eLFcz

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      7d9275bc0599879ca7877408959bc9c0_NeikiAnalytics.exe

    • Size

      3.6MB

    • MD5

      7d9275bc0599879ca7877408959bc9c0

    • SHA1

      47104c9ac31f181b0a10e03a88a3c5ed57c2a658

    • SHA256

      1076c7347822c6ab5645edccf927fc6c63a2d73af365bffa660c88344a1609b2

    • SHA512

      6593187e010974d41cdb76c7a5ed6acfd92cd4b9cea5b2a6925e41487aa7d44451ffbc762fbc18cda6e45034810bf54f4d55d94259acdb2542fc6713ce99b7f8

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBpB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpGbVz8eLFcz

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks