Overview

overview

7

Static

static

3

3139b8b3d2...cs.exe

windows7-x64

7

3139b8b3d2...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3139b8b3d29abbc11da371445af130772915cb30809085d429ea6dbfffb6c9ea_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240628-3hwgpsverc

  • MD5

    f240977742c2ede3a47e2f8a51e1e9e0

  • SHA1

    d08b16939556b21db4dca5dedfb2a07e10c0f3d7

  • SHA256

    3139b8b3d29abbc11da371445af130772915cb30809085d429ea6dbfffb6c9ea

  • SHA512

    f208942b6f9e7f6b6ad0eef3c2ab9689a8c9965c1448ac09961bbfb319808f0c4c4eb37869172c4b33a5e43aed07f170aea2151505beff5f4c1605c2a5c9de1b

  • SSDEEP

    12288:Bu8vaylw/IyES7zN4kqho3qJlW7puLThWyEIPB44CNTnpjFqQ:BuKhG/5ESOhoaJlmUvgAPS9pjY

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      3139b8b3d29abbc11da371445af130772915cb30809085d429ea6dbfffb6c9ea_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      f240977742c2ede3a47e2f8a51e1e9e0

    • SHA1

      d08b16939556b21db4dca5dedfb2a07e10c0f3d7

    • SHA256

      3139b8b3d29abbc11da371445af130772915cb30809085d429ea6dbfffb6c9ea

    • SHA512

      f208942b6f9e7f6b6ad0eef3c2ab9689a8c9965c1448ac09961bbfb319808f0c4c4eb37869172c4b33a5e43aed07f170aea2151505beff5f4c1605c2a5c9de1b

    • SSDEEP

      12288:Bu8vaylw/IyES7zN4kqho3qJlW7puLThWyEIPB44CNTnpjFqQ:BuKhG/5ESOhoaJlmUvgAPS9pjY

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks