General

  • Target

    98a905235a42d7c38fcf83580d259360_NEIKI

  • Size

    2.6MB

  • Sample

    240508-b5bbhabh8x

  • MD5

    98a905235a42d7c38fcf83580d259360

  • SHA1

    3fd557d3049675e9f676b02b0d0e81eb2792dace

  • SHA256

    b59b8f04ac20aa3b9a374e37d1d956837ad8f99349c09c54619b19041a05c5c9

  • SHA512

    eb115a105ef725f807c977146dd39dcf5d287b3b77978c36222573dcb26a22fe044c74ba5a4c626e4fc31dd46da07791630326a8c909862355f98d5d97aee0f3

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB3B/bS:sxX7QnxrloE5dpUpwb

Malware Config

Targets

    • Target

      98a905235a42d7c38fcf83580d259360_NEIKI

    • Size

      2.6MB

    • MD5

      98a905235a42d7c38fcf83580d259360

    • SHA1

      3fd557d3049675e9f676b02b0d0e81eb2792dace

    • SHA256

      b59b8f04ac20aa3b9a374e37d1d956837ad8f99349c09c54619b19041a05c5c9

    • SHA512

      eb115a105ef725f807c977146dd39dcf5d287b3b77978c36222573dcb26a22fe044c74ba5a4c626e4fc31dd46da07791630326a8c909862355f98d5d97aee0f3

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB3B/bS:sxX7QnxrloE5dpUpwb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks