Overview

overview

10

Static

static

10

b80bc95f76...cs.exe

windows7-x64

10

b80bc95f76...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b80bc95f761e9cf8b844df8c1312cb2ac634da77907ee1659af7e5d8f260c2a7_NeikiAnalytics.exe

  • Size

    141KB

  • Sample

    240629-xn435sxapk

  • MD5

    554575c7a931a30957fb7c13650b5a10

  • SHA1

    2ccd0be67e3bf05c327d838002d3e4c2bafd10b3

  • SHA256

    b80bc95f761e9cf8b844df8c1312cb2ac634da77907ee1659af7e5d8f260c2a7

  • SHA512

    f0538a65e6723d740fff12be280e744a6b395b6db6ff4576b8d52a3b2acfb381c14068fb84d9cf8b076376c9cc1246357449ea264fb2fe87fad9486b8edc146a

  • SSDEEP

    1536:JxqjQ+P04wsmJCQeuWNN9eNeCRKuxUSW8YWbfOxqjQ+P04wsmJC:sr85CQeuWNN9eNeCRKuxUSW8YKr85C

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      b80bc95f761e9cf8b844df8c1312cb2ac634da77907ee1659af7e5d8f260c2a7_NeikiAnalytics.exe

    • Size

      141KB

    • MD5

      554575c7a931a30957fb7c13650b5a10

    • SHA1

      2ccd0be67e3bf05c327d838002d3e4c2bafd10b3

    • SHA256

      b80bc95f761e9cf8b844df8c1312cb2ac634da77907ee1659af7e5d8f260c2a7

    • SHA512

      f0538a65e6723d740fff12be280e744a6b395b6db6ff4576b8d52a3b2acfb381c14068fb84d9cf8b076376c9cc1246357449ea264fb2fe87fad9486b8edc146a

    • SSDEEP

      1536:JxqjQ+P04wsmJCQeuWNN9eNeCRKuxUSW8YWbfOxqjQ+P04wsmJC:sr85CQeuWNN9eNeCRKuxUSW8YKr85C

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks