Overview

overview

7

Static

static

3

3108f0e9be...cs.exe

windows7-x64

7

3108f0e9be...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3108f0e9bed1671062d65139f72dc9e132d8f32f97cac286b2a437783b7d51f4_NeikiAnalytics.exe

  • Size

    648KB

  • Sample

    240701-dpcwhaxglr

  • MD5

    0abec97a1aba33ef576bf56b3ab8b990

  • SHA1

    4ddb284802571884968658a8eefaf434b3c14588

  • SHA256

    3108f0e9bed1671062d65139f72dc9e132d8f32f97cac286b2a437783b7d51f4

  • SHA512

    62feb2335692a4be1dae7f322387be44e95a1a80df3524b7fb239abe2cc4ef055ab145a4fb840c458fae7b034f658f709a5ae278f66fa3506cf4618dadad9c48

  • SSDEEP

    12288:Nqz2DWU34+/x8J7ct3z5htUcQ1MlhrmQgwwJzt5+7fyZkCtXFiWZF/3o:Az2DWI4+mIJz5IcuMlQHJxrDiSi

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      3108f0e9bed1671062d65139f72dc9e132d8f32f97cac286b2a437783b7d51f4_NeikiAnalytics.exe

    • Size

      648KB

    • MD5

      0abec97a1aba33ef576bf56b3ab8b990

    • SHA1

      4ddb284802571884968658a8eefaf434b3c14588

    • SHA256

      3108f0e9bed1671062d65139f72dc9e132d8f32f97cac286b2a437783b7d51f4

    • SHA512

      62feb2335692a4be1dae7f322387be44e95a1a80df3524b7fb239abe2cc4ef055ab145a4fb840c458fae7b034f658f709a5ae278f66fa3506cf4618dadad9c48

    • SSDEEP

      12288:Nqz2DWU34+/x8J7ct3z5htUcQ1MlhrmQgwwJzt5+7fyZkCtXFiWZF/3o:Az2DWI4+mIJz5IcuMlQHJxrDiSi

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks