General
-
Target
2bb9fd70f2325bae36467f71eb0d944c06599f8366ebacb4ed965373a0bf3d83_NeikiAnalytics.exe
-
Size
163KB
-
Sample
240701-b23lkswapq
-
MD5
3ec90cbb8ca16e0d39b7fc12c7927dd0
-
SHA1
23df2dcfa5c4285e7fc1a9d226d7e8950482e50e
-
SHA256
2bb9fd70f2325bae36467f71eb0d944c06599f8366ebacb4ed965373a0bf3d83
-
SHA512
a25ebf13c5809156f5b2a0af04f0c2c8ddc7e38804563a5a32f7911ee142df7b724ec309dc80cab66422b8d1b3d717bd6c15ace5fddcb1ea64625411bcff928b
-
SSDEEP
1536:PlLA6MuKbrG41EOFmqnhW8QrbC9hJvCbFrlProNVU4qNVUrk/9QbfBr+7GwKrPAS:RUjXG4bxhJvCbFrltOrWKDBr+yJb
Static task
static1
Behavioral task
behavioral1
Sample
2bb9fd70f2325bae36467f71eb0d944c06599f8366ebacb4ed965373a0bf3d83_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2bb9fd70f2325bae36467f71eb0d944c06599f8366ebacb4ed965373a0bf3d83_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
gozi
Targets
-
-
Target
2bb9fd70f2325bae36467f71eb0d944c06599f8366ebacb4ed965373a0bf3d83_NeikiAnalytics.exe
-
Size
163KB
-
MD5
3ec90cbb8ca16e0d39b7fc12c7927dd0
-
SHA1
23df2dcfa5c4285e7fc1a9d226d7e8950482e50e
-
SHA256
2bb9fd70f2325bae36467f71eb0d944c06599f8366ebacb4ed965373a0bf3d83
-
SHA512
a25ebf13c5809156f5b2a0af04f0c2c8ddc7e38804563a5a32f7911ee142df7b724ec309dc80cab66422b8d1b3d717bd6c15ace5fddcb1ea64625411bcff928b
-
SSDEEP
1536:PlLA6MuKbrG41EOFmqnhW8QrbC9hJvCbFrlProNVU4qNVUrk/9QbfBr+7GwKrPAS:RUjXG4bxhJvCbFrltOrWKDBr+yJb
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-