Overview

overview

7

Static

static

3

690fe1f8a3...cs.exe

windows7-x64

7

690fe1f8a3...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    690fe1f8a3aaea80642698c60ec094cac4cd1c6ad7b5b4b533da07b11d08f388_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240627-jylsnasfrn

  • MD5

    cabc3fb02b8f5ded17e202976dcd40a0

  • SHA1

    faa8ef33fb0eaafcc58f0896095fdfc6e454f5fb

  • SHA256

    690fe1f8a3aaea80642698c60ec094cac4cd1c6ad7b5b4b533da07b11d08f388

  • SHA512

    3db0063a833d5afe0ec14f399fa17fbd72f1d72014336a30097269d5a608053ebb3d6d6dfc248dff13be43aaec8471d159b0422c8f81ea1cd977bb43c900991b

  • SSDEEP

    12288:nvToH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:vo2JOt934J7Z6bQaj1BvUm9J

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      690fe1f8a3aaea80642698c60ec094cac4cd1c6ad7b5b4b533da07b11d08f388_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      cabc3fb02b8f5ded17e202976dcd40a0

    • SHA1

      faa8ef33fb0eaafcc58f0896095fdfc6e454f5fb

    • SHA256

      690fe1f8a3aaea80642698c60ec094cac4cd1c6ad7b5b4b533da07b11d08f388

    • SHA512

      3db0063a833d5afe0ec14f399fa17fbd72f1d72014336a30097269d5a608053ebb3d6d6dfc248dff13be43aaec8471d159b0422c8f81ea1cd977bb43c900991b

    • SSDEEP

      12288:nvToH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:vo2JOt934J7Z6bQaj1BvUm9J

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks