Overview

overview

7

Static

static

3

27043516a5...cs.exe

windows7-x64

7

27043516a5...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    27043516a5c68d4a720a4134ee42e3adb6128fee739ca2e4d38a74ff42b0bf35_NeikiAnalytics.exe

  • Size

    625KB

  • Sample

    240625-3xt77atglm

  • MD5

    da36ec1ccfba4987c4dd7f9491479530

  • SHA1

    e90cf92e6ad5fcb7e25375511555931fe284feb9

  • SHA256

    27043516a5c68d4a720a4134ee42e3adb6128fee739ca2e4d38a74ff42b0bf35

  • SHA512

    828e16bd931460b7324f118dc646ba95d80b87f88c43e0557b35dc53ed5ca612c23a49e1cfc20b03f051fb3daaf8c237642811f02790cb76d95e459294946a37

  • SSDEEP

    12288:c2cGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhh:pDt/sBlDqgZQd6XKtiMJYiPUh

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      27043516a5c68d4a720a4134ee42e3adb6128fee739ca2e4d38a74ff42b0bf35_NeikiAnalytics.exe

    • Size

      625KB

    • MD5

      da36ec1ccfba4987c4dd7f9491479530

    • SHA1

      e90cf92e6ad5fcb7e25375511555931fe284feb9

    • SHA256

      27043516a5c68d4a720a4134ee42e3adb6128fee739ca2e4d38a74ff42b0bf35

    • SHA512

      828e16bd931460b7324f118dc646ba95d80b87f88c43e0557b35dc53ed5ca612c23a49e1cfc20b03f051fb3daaf8c237642811f02790cb76d95e459294946a37

    • SSDEEP

      12288:c2cGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhh:pDt/sBlDqgZQd6XKtiMJYiPUh

    Score
    7/10
    spywarestealerdiscovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks