Overview

overview

7

Static

static

3

ab3e1c009a...cs.exe

windows7-x64

7

ab3e1c009a...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab3e1c009a95a3c702f2fca8693e7dfaa75844e28381a81b62c05576f24e5cb7_NeikiAnalytics.exe

  • Size

    625KB

  • Sample

    240629-pj8lrszgqm

  • MD5

    bc755a976f6e87928e2954bf3299d6c0

  • SHA1

    f5b0f6c373195e1412881016481ae77607df5785

  • SHA256

    ab3e1c009a95a3c702f2fca8693e7dfaa75844e28381a81b62c05576f24e5cb7

  • SHA512

    c79460d0e665d439ddadfab54956c2a24b231e7e561246287ee8e1e1be3860769a9bf96b30c9b23ac536429e8dc7aa352373111b75642c6d45465066fc4180dc

  • SSDEEP

    12288:r2o7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+U:6oCks7WE9F5pwg8zmdqQjC60jiHkU

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      ab3e1c009a95a3c702f2fca8693e7dfaa75844e28381a81b62c05576f24e5cb7_NeikiAnalytics.exe

    • Size

      625KB

    • MD5

      bc755a976f6e87928e2954bf3299d6c0

    • SHA1

      f5b0f6c373195e1412881016481ae77607df5785

    • SHA256

      ab3e1c009a95a3c702f2fca8693e7dfaa75844e28381a81b62c05576f24e5cb7

    • SHA512

      c79460d0e665d439ddadfab54956c2a24b231e7e561246287ee8e1e1be3860769a9bf96b30c9b23ac536429e8dc7aa352373111b75642c6d45465066fc4180dc

    • SSDEEP

      12288:r2o7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+U:6oCks7WE9F5pwg8zmdqQjC60jiHkU

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks