Overview

overview

7

Static

static

3

452d1e7ab8...cs.exe

windows7-x64

7

452d1e7ab8...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    452d1e7ab8579e741d4f4594df6e35f3f8f64469140ceacb9e62ad6d60829af4_NeikiAnalytics.exe

  • Size

    1.5MB

  • Sample

    240628-aabs4sscqn

  • MD5

    2c63f0a5e4e0657c13ec2991e95badc0

  • SHA1

    67c3fdc15d39fa8334491207eb2d7834ce599eea

  • SHA256

    452d1e7ab8579e741d4f4594df6e35f3f8f64469140ceacb9e62ad6d60829af4

  • SHA512

    7b6093faa52258a530b4049b038c7a3427c4c63239c0cff3958d09a8db69ba5d5adaf738ae6e2bd844e6da7c14193a49730fddb76b62c994f79ab04c29655e1d

  • SSDEEP

    12288:Uka7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+:TaCks7WE9F5pwg8zmdqQjC60jiHkU

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      452d1e7ab8579e741d4f4594df6e35f3f8f64469140ceacb9e62ad6d60829af4_NeikiAnalytics.exe

    • Size

      1.5MB

    • MD5

      2c63f0a5e4e0657c13ec2991e95badc0

    • SHA1

      67c3fdc15d39fa8334491207eb2d7834ce599eea

    • SHA256

      452d1e7ab8579e741d4f4594df6e35f3f8f64469140ceacb9e62ad6d60829af4

    • SHA512

      7b6093faa52258a530b4049b038c7a3427c4c63239c0cff3958d09a8db69ba5d5adaf738ae6e2bd844e6da7c14193a49730fddb76b62c994f79ab04c29655e1d

    • SSDEEP

      12288:Uka7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+:TaCks7WE9F5pwg8zmdqQjC60jiHkU

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks