General
-
Target
8bdc4db1206dece3e1cd05267080e9e5f342a31abf53c58bee03eff46d061101_NeikiAnalytics.exe
-
Size
1.1MB
-
Sample
240624-te5rjazhqe
-
MD5
a09b519415a8d57d34aa43b75e7536c0
-
SHA1
5186d8fa6d801ce80a737afe7917b5ef312d2a49
-
SHA256
8bdc4db1206dece3e1cd05267080e9e5f342a31abf53c58bee03eff46d061101
-
SHA512
adf426f737217508704fd4621db2f80214ceb7bc168527caf218eeba8753756137f57acf726a981531940bbb7d8bdfbc47426afffe5d8611ba01d26c66a2a853
-
SSDEEP
24576:PAHnh+eWsN3skA4RV1Hom2KXMmHa2XSzx4B+PTix5:yh+ZkldoPK8Ya2XSV48PTY
Static task
static1
Behavioral task
behavioral1
Sample
8bdc4db1206dece3e1cd05267080e9e5f342a31abf53c58bee03eff46d061101_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8bdc4db1206dece3e1cd05267080e9e5f342a31abf53c58bee03eff46d061101_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
cp8nl.hyperhost.ua - Port:
587 - Username:
[email protected] - Password:
cy+G_(979n9N - Email To:
[email protected]
Targets
-
-
Target
8bdc4db1206dece3e1cd05267080e9e5f342a31abf53c58bee03eff46d061101_NeikiAnalytics.exe
-
Size
1.1MB
-
MD5
a09b519415a8d57d34aa43b75e7536c0
-
SHA1
5186d8fa6d801ce80a737afe7917b5ef312d2a49
-
SHA256
8bdc4db1206dece3e1cd05267080e9e5f342a31abf53c58bee03eff46d061101
-
SHA512
adf426f737217508704fd4621db2f80214ceb7bc168527caf218eeba8753756137f57acf726a981531940bbb7d8bdfbc47426afffe5d8611ba01d26c66a2a853
-
SSDEEP
24576:PAHnh+eWsN3skA4RV1Hom2KXMmHa2XSzx4B+PTix5:yh+ZkldoPK8Ya2XSV48PTY
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-