Overview

overview

7

Static

static

3

1bd08e5458...cs.exe

windows7-x64

7

1bd08e5458...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bd08e5458fba0f021bb7605f6b6e40260a59d2152a04e24804b082754e95f9c_NeikiAnalytics.exe

  • Size

    625KB

  • Sample

    240630-1hc91sweqb

  • MD5

    ed52e4417081f0ab8e3a1b42087f17d0

  • SHA1

    f7136c24a0e4aab9eca6bb9524c90023c3d47bbb

  • SHA256

    1bd08e5458fba0f021bb7605f6b6e40260a59d2152a04e24804b082754e95f9c

  • SHA512

    43d535d7c9e396a34a4e77024501c5dfb822bb260824d3b5024bc676f12e21b420b72f57cb731746586dfb8c91604f1fc126de5f7ba26c2dd199f2d865aa3faf

  • SSDEEP

    12288:W2c+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:zdMdIuwe3zfIe7xmvH/

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      1bd08e5458fba0f021bb7605f6b6e40260a59d2152a04e24804b082754e95f9c_NeikiAnalytics.exe

    • Size

      625KB

    • MD5

      ed52e4417081f0ab8e3a1b42087f17d0

    • SHA1

      f7136c24a0e4aab9eca6bb9524c90023c3d47bbb

    • SHA256

      1bd08e5458fba0f021bb7605f6b6e40260a59d2152a04e24804b082754e95f9c

    • SHA512

      43d535d7c9e396a34a4e77024501c5dfb822bb260824d3b5024bc676f12e21b420b72f57cb731746586dfb8c91604f1fc126de5f7ba26c2dd199f2d865aa3faf

    • SSDEEP

      12288:W2c+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:zdMdIuwe3zfIe7xmvH/

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks