153fd8f71fdaf384c9bd117bda9ca137991bbcad91f11d822d3689acea02af99 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

153fd8f71f...cs.exe

windows7-x64

7

153fd8f71f...cs.exe

windows10-2004-x64

7

Sharing

General

Target

153fd8f71fdaf384c9bd117bda9ca137991bbcad91f11d822d3689acea02af99_NeikiAnalytics.exe
Size

648KB
Sample

240630-a9mdws1brh
MD5

d21f48b082b40c1fda07d82037c720f0
SHA1

7b3ce7911c5221e7b349eaea9e66cc141e184acd
SHA256

153fd8f71fdaf384c9bd117bda9ca137991bbcad91f11d822d3689acea02af99
SHA512

d81278400d4a8f10ee8fa639097e20db83a2ce5341c7b6ffa350ffc20cd333fe251c4db88f1ab03f391a5149f36d51c0a8282e1b5b60588fc8158bd1cf4750c6
SSDEEP

12288:3qz2DWU88+Tn6VMP5CPU6EkUw6XvV2NlLiwXmVmMdpx7TjLNFtA2byK9CTIb7n:6z2DWO+L6VMRCPU6CENltmVVdpx7fLrf

Score

7^/10

spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

153fd8f71fdaf384c9bd117bda9ca137991bbcad91f11d822d3689acea02af99_NeikiAnalytics.exe

Resource

win7-20240611-en

spyware stealer

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

153fd8f71fdaf384c9bd117bda9ca137991bbcad91f11d822d3689acea02af99_NeikiAnalytics.exe

Resource

win10v2004-20240611-en

spyware stealer

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  153fd8f71fdaf384c9bd117bda9ca137991bbcad91f11d822d3689acea02af99_NeikiAnalytics.exe
- Size
  
  648KB
- MD5
  
  d21f48b082b40c1fda07d82037c720f0
- SHA1
  
  7b3ce7911c5221e7b349eaea9e66cc141e184acd
- SHA256
  
  153fd8f71fdaf384c9bd117bda9ca137991bbcad91f11d822d3689acea02af99
- SHA512
  
  d81278400d4a8f10ee8fa639097e20db83a2ce5341c7b6ffa350ffc20cd333fe251c4db88f1ab03f391a5149f36d51c0a8282e1b5b60588fc8158bd1cf4750c6
- SSDEEP
  
  12288:3qz2DWU88+Tn6VMP5CPU6EkUw6XvV2NlLiwXmVmMdpx7TjLNFtA2byK9CTIb7n:6z2DWO+L6VMRCPU6CENltmVVdpx7fLrf
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy