Overview

overview

7

Static

static

3

71b9b0a432...cs.exe

windows7-x64

7

71b9b0a432...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    71b9b0a4326b6246d0b35cc3fdaaad00_NeikiAnalytics.exe

  • Size

    625KB

  • Sample

    240617-k9q27athpe

  • MD5

    71b9b0a4326b6246d0b35cc3fdaaad00

  • SHA1

    96e51851a24a3a7f12f105c2014b3917e099d103

  • SHA256

    ca37caf92b8ae973fd374192e71eb38bd67a51857dcd071fbffb60a0e467aae8

  • SHA512

    d6ecfe85fd38ab06881d76cf49f64c01f0d8fe628828795753f38a6c47f7b23b25b7f0ed8fb4e1a7f44c225a66bbc97fc6a2c778c6d1ed566deb91642902b225

  • SSDEEP

    12288:e2YyndwCg6/xjPHFFBwpRDftD7IBUgbScDQCSkb6wjfRMVviOvf7sibN3A1G31f9:7Ye1g6p7HF/w/ftDsBUiScD7WGfWVbvd

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      71b9b0a4326b6246d0b35cc3fdaaad00_NeikiAnalytics.exe

    • Size

      625KB

    • MD5

      71b9b0a4326b6246d0b35cc3fdaaad00

    • SHA1

      96e51851a24a3a7f12f105c2014b3917e099d103

    • SHA256

      ca37caf92b8ae973fd374192e71eb38bd67a51857dcd071fbffb60a0e467aae8

    • SHA512

      d6ecfe85fd38ab06881d76cf49f64c01f0d8fe628828795753f38a6c47f7b23b25b7f0ed8fb4e1a7f44c225a66bbc97fc6a2c778c6d1ed566deb91642902b225

    • SSDEEP

      12288:e2YyndwCg6/xjPHFFBwpRDftD7IBUgbScDQCSkb6wjfRMVviOvf7sibN3A1G31f9:7Ye1g6p7HF/w/ftDsBUiScD7WGfWVbvd

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks