Overview

overview

7

Static

static

3

9185fb152f...cs.exe

windows7-x64

7

9185fb152f...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9185fb152fdae9910e3da49fe9eecb3abada65686b72bf77198867b5d9220537_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240628-lppt3asfrh

  • MD5

    3b4f69e7b8f073a00588129236ca8c00

  • SHA1

    c0e47dad3596f720a697ce5b90cfba7904379b5f

  • SHA256

    9185fb152fdae9910e3da49fe9eecb3abada65686b72bf77198867b5d9220537

  • SHA512

    c815b0984a93c31175e094afe6fbc040c0d57edc2aa48f5e455b7b9f93e5f79a80e39e56a2d559809dbb08ed6b4a0f542daf5987b378b3a61e53e7f166e2b45f

  • SSDEEP

    24576:oWbmGTnuTjB+Y1lR4k75JOD1lLyRKtAV9pgZlCZ:VbmG4cY1LsZp8KtAVXgZlCZ

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      9185fb152fdae9910e3da49fe9eecb3abada65686b72bf77198867b5d9220537_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      3b4f69e7b8f073a00588129236ca8c00

    • SHA1

      c0e47dad3596f720a697ce5b90cfba7904379b5f

    • SHA256

      9185fb152fdae9910e3da49fe9eecb3abada65686b72bf77198867b5d9220537

    • SHA512

      c815b0984a93c31175e094afe6fbc040c0d57edc2aa48f5e455b7b9f93e5f79a80e39e56a2d559809dbb08ed6b4a0f542daf5987b378b3a61e53e7f166e2b45f

    • SSDEEP

      24576:oWbmGTnuTjB+Y1lR4k75JOD1lLyRKtAV9pgZlCZ:VbmG4cY1LsZp8KtAVXgZlCZ

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks