General
-
Target
5823d37287e73a4d4b975fe14dd2b0509d591716f931e54ddefe572e09ab082d_NeikiAnalytics.exe
-
Size
163KB
-
Sample
240701-rp3ntawene
-
MD5
a4e542ad1d9953d43b7c1bfb78371b40
-
SHA1
536c48f6ca530659ee6eba56a4d4acd4a2a1bff1
-
SHA256
5823d37287e73a4d4b975fe14dd2b0509d591716f931e54ddefe572e09ab082d
-
SHA512
a8e5cf440742dbd2b0984abc85579aa3a26dae5370bf1a1afa0af1304418cbc9cd7f364da24904b73bf05f8a8292b042a965dd6d15a7cb6af6cbaa3aad4325ea
-
SSDEEP
1536:PZhB+W0hNB+8495dyta5wn9Gt8lProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Tz0hNQ84gYmltOrWKDBr+yJb
Static task
static1
Behavioral task
behavioral1
Sample
5823d37287e73a4d4b975fe14dd2b0509d591716f931e54ddefe572e09ab082d_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5823d37287e73a4d4b975fe14dd2b0509d591716f931e54ddefe572e09ab082d_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gozi
Targets
-
-
Target
5823d37287e73a4d4b975fe14dd2b0509d591716f931e54ddefe572e09ab082d_NeikiAnalytics.exe
-
Size
163KB
-
MD5
a4e542ad1d9953d43b7c1bfb78371b40
-
SHA1
536c48f6ca530659ee6eba56a4d4acd4a2a1bff1
-
SHA256
5823d37287e73a4d4b975fe14dd2b0509d591716f931e54ddefe572e09ab082d
-
SHA512
a8e5cf440742dbd2b0984abc85579aa3a26dae5370bf1a1afa0af1304418cbc9cd7f364da24904b73bf05f8a8292b042a965dd6d15a7cb6af6cbaa3aad4325ea
-
SSDEEP
1536:PZhB+W0hNB+8495dyta5wn9Gt8lProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Tz0hNQ84gYmltOrWKDBr+yJb
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-