Extracted

• • Target

    b0ee6e646cfcfde3772f06db28198b50_NeikiAnalytics.exe

  • Size

    10KB

  • MD5

    b0ee6e646cfcfde3772f06db28198b50

  • SHA1

    6a8c094cfb3f6ba0c333018e48ce1241607a3418

  • SHA256

    dca1522e2127fb2f138754022464e2803adf6f17034a907ef1e2247f715733fc

  • SHA512

    571b5db1642d0eebf93f8ed588fe662654f2465ff66eaf55b8878a3cffda5d077045db6dfa376899f867e5d71a313ac307d868e640f473c293a73a4ea60cc7ca

  • SSDEEP

    192:rx1QE6hCVFH+h4WiFvh+vg0+0i4oIKAm8O4RxP:HygFH+qbhx0O4GkO4Rx

  Score

  10^/10

  purecrypterdownloaderloaderpersistencespywarestealer

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2