Overview

overview

10

Static

static

10

2300ce3e55...cs.exe

windows7-x64

10

2300ce3e55...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2300ce3e55479227b366df55cb8a5d43efa43b6c0c8adb80fa220b601337ce6c_NeikiAnalytics.exe

  • Size

    279KB

  • Sample

    240620-bqzesavglr

  • MD5

    3acf13b673018a4a3e1fd8aaa0e58630

  • SHA1

    edc0061f2159d008d9d4b482091ac5b79469bb63

  • SHA256

    2300ce3e55479227b366df55cb8a5d43efa43b6c0c8adb80fa220b601337ce6c

  • SHA512

    f8266bea2562aa192a3cfd36508cc13dfe4b35b6ddb4eb8298b9cd56c181ff1c5dd45a31741258c9a1cba38e3917eaa6c2c4a6688992ce53f6d8d5a3722f8c73

  • SSDEEP

    6144:k94igzm8g10UJ9y6uIAMDr/10Dy1Omi4zANf/dsQELvLf884rxJp1VbQxhJ8i+:7mZ2UbaOJ8

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      2300ce3e55479227b366df55cb8a5d43efa43b6c0c8adb80fa220b601337ce6c_NeikiAnalytics.exe

    • Size

      279KB

    • MD5

      3acf13b673018a4a3e1fd8aaa0e58630

    • SHA1

      edc0061f2159d008d9d4b482091ac5b79469bb63

    • SHA256

      2300ce3e55479227b366df55cb8a5d43efa43b6c0c8adb80fa220b601337ce6c

    • SHA512

      f8266bea2562aa192a3cfd36508cc13dfe4b35b6ddb4eb8298b9cd56c181ff1c5dd45a31741258c9a1cba38e3917eaa6c2c4a6688992ce53f6d8d5a3722f8c73

    • SSDEEP

      6144:k94igzm8g10UJ9y6uIAMDr/10Dy1Omi4zANf/dsQELvLf884rxJp1VbQxhJ8i+:7mZ2UbaOJ8

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks