421bf5a06b27950edc9444f838e7c6a7fc05b6f7c7ee30957b9bf4d132edca4f | Triage

Sharing

General

Target

180432d10e94a8d12670cdb5b83c3f60_NEIKI
Size

62KB
Sample

240508-jpp4qacg34
MD5

180432d10e94a8d12670cdb5b83c3f60
SHA1

76c981ee49c093fd65412c167c9cebdc9bd2cdf1
SHA256

421bf5a06b27950edc9444f838e7c6a7fc05b6f7c7ee30957b9bf4d132edca4f
SHA512

5c756e4e3052065aca1657689d166a159794164d1b8b3216a770ca65b4c3a22a172c72083d372274e00b15897eeb881061b2537416a4ede971eedfe85de4e0fa
SSDEEP

768:QVyA+p4eAUf+aPoASIZjCxb0fo7c0oeS0:Qop4omMoASKeKo7c0oY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  180432d10e94a8d12670cdb5b83c3f60_NEIKI
- Size
  
  62KB
- MD5
  
  180432d10e94a8d12670cdb5b83c3f60
- SHA1
  
  76c981ee49c093fd65412c167c9cebdc9bd2cdf1
- SHA256
  
  421bf5a06b27950edc9444f838e7c6a7fc05b6f7c7ee30957b9bf4d132edca4f
- SHA512
  
  5c756e4e3052065aca1657689d166a159794164d1b8b3216a770ca65b4c3a22a172c72083d372274e00b15897eeb881061b2537416a4ede971eedfe85de4e0fa
- SSDEEP
  
  768:QVyA+p4eAUf+aPoASIZjCxb0fo7c0oeS0:Qop4omMoASKeKo7c0oY
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2