Overview

overview

7

Static

static

3

78e0c9bdce...cs.exe

windows7-x64

7

78e0c9bdce...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    78e0c9bdce8013ea976fc5f83ad18e20cd3202a324e6c6d6462c13cd13e4c962_NeikiAnalytics.exe

  • Size

    648KB

  • Sample

    240624-qlx4gsxfkp

  • MD5

    e65d8749e10a9b191453067afb5b93a0

  • SHA1

    987b072db01902702136251e219cd5331bea6436

  • SHA256

    78e0c9bdce8013ea976fc5f83ad18e20cd3202a324e6c6d6462c13cd13e4c962

  • SHA512

    a52befb1485a2c3521826c27c7bc199d0516a9f3f8f1f519c752846a61bb322a4181a1136be000c999ae08cdeed6d2265694f3a323f4d2b9353199fea9df85b5

  • SSDEEP

    12288:vqz2DWUyVqKNdQ8yRK6rkObwsToHOOWGgqvoEWH/lInNg4JYU5a0Cuxy:iz2DWnVqIi2lObXobHAEW9INFJY0au

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      78e0c9bdce8013ea976fc5f83ad18e20cd3202a324e6c6d6462c13cd13e4c962_NeikiAnalytics.exe

    • Size

      648KB

    • MD5

      e65d8749e10a9b191453067afb5b93a0

    • SHA1

      987b072db01902702136251e219cd5331bea6436

    • SHA256

      78e0c9bdce8013ea976fc5f83ad18e20cd3202a324e6c6d6462c13cd13e4c962

    • SHA512

      a52befb1485a2c3521826c27c7bc199d0516a9f3f8f1f519c752846a61bb322a4181a1136be000c999ae08cdeed6d2265694f3a323f4d2b9353199fea9df85b5

    • SSDEEP

      12288:vqz2DWUyVqKNdQ8yRK6rkObwsToHOOWGgqvoEWH/lInNg4JYU5a0Cuxy:iz2DWnVqIi2lObXobHAEW9INFJY0au

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks