Overview

overview

7

Static

static

7

182d45e9e9...cs.exe

windows7-x64

7

182d45e9e9...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    182d45e9e93e1294f88e0c16d9c25955d1875ac7dbe5fa3aae2241eb40b4ef76_NeikiAnalytics.exe

  • Size

    27KB

  • Sample

    240630-zhra7svdpg

  • MD5

    e5a764ae45907211a6314041754b6090

  • SHA1

    3097fef64227e1117e7feb500dcf4b4dc271e26a

  • SHA256

    182d45e9e93e1294f88e0c16d9c25955d1875ac7dbe5fa3aae2241eb40b4ef76

  • SHA512

    df5369695b54bbb36c5ccc1af4386f0de8b055c3929878b298810b757da96353d9b4e8e477c165d79230441f00326921314c0223748202fb0f5bacbd6200bc75

  • SSDEEP

    768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMm:N5VzcfA/6LrVpL74gfh16nm

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      182d45e9e93e1294f88e0c16d9c25955d1875ac7dbe5fa3aae2241eb40b4ef76_NeikiAnalytics.exe

    • Size

      27KB

    • MD5

      e5a764ae45907211a6314041754b6090

    • SHA1

      3097fef64227e1117e7feb500dcf4b4dc271e26a

    • SHA256

      182d45e9e93e1294f88e0c16d9c25955d1875ac7dbe5fa3aae2241eb40b4ef76

    • SHA512

      df5369695b54bbb36c5ccc1af4386f0de8b055c3929878b298810b757da96353d9b4e8e477c165d79230441f00326921314c0223748202fb0f5bacbd6200bc75

    • SSDEEP

      768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMm:N5VzcfA/6LrVpL74gfh16nm

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks