General

  • Target

    2365f75819d10d068a60fb05ba0284f0_NEIKI

  • Size

    1.5MB

  • Sample

    240508-j4qnssah9t

  • MD5

    2365f75819d10d068a60fb05ba0284f0

  • SHA1

    14483144a15c88c7c04dd9c2517cce424f600ed3

  • SHA256

    5a0350b5fafb41054e92b05fbcdccdd13986d817a0db1d457ac2ebe2a00ccdd5

  • SHA512

    0ba72306ba601355278b917f0f9bbf2d27fbc67763f2559c89e11d337dc04d3d8f781b1a2d821670f2ee9d7b4be0634d158d169a10d2550a949c423b8ca90bb3

  • SSDEEP

    12288:+0E00UzP17kFQwzY3aRRJ9cpYEGxH+UegDKuhNpRO:peyd8QwzY6RHlxpDl/pRO

Score
7/10

Malware Config

Targets

    • Target

      2365f75819d10d068a60fb05ba0284f0_NEIKI

    • Size

      1.5MB

    • MD5

      2365f75819d10d068a60fb05ba0284f0

    • SHA1

      14483144a15c88c7c04dd9c2517cce424f600ed3

    • SHA256

      5a0350b5fafb41054e92b05fbcdccdd13986d817a0db1d457ac2ebe2a00ccdd5

    • SHA512

      0ba72306ba601355278b917f0f9bbf2d27fbc67763f2559c89e11d337dc04d3d8f781b1a2d821670f2ee9d7b4be0634d158d169a10d2550a949c423b8ca90bb3

    • SSDEEP

      12288:+0E00UzP17kFQwzY3aRRJ9cpYEGxH+UegDKuhNpRO:peyd8QwzY6RHlxpDl/pRO

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks