General

  • Target

    18058fe6d3c5c29f937688f559af8d80_NeikiAnalytics

  • Size

    1.5MB

  • Sample

    240509-2yrm1sbg4y

  • MD5

    18058fe6d3c5c29f937688f559af8d80

  • SHA1

    a011246aae945ac3c51f983997a65296f3e858f4

  • SHA256

    8eba81c70c8ef73c66163f3ae57403052bfd17a4427984bbb49c75566b91a9e6

  • SHA512

    36d39017951be0125a23641acc54eb7af3107a2925d8d04428058bd73a93d69b74eb3d79431bd0ca8717e067f65aef420ef298fbbcc59bc2b24d4686fa067fbf

  • SSDEEP

    12288:eU0XI7vgbrWVQhTCYHvRktx/aICF9flefuKaO0VQ/:p/743TvRk6NwG

Score
7/10

Malware Config

Targets

    • Target

      18058fe6d3c5c29f937688f559af8d80_NeikiAnalytics

    • Size

      1.5MB

    • MD5

      18058fe6d3c5c29f937688f559af8d80

    • SHA1

      a011246aae945ac3c51f983997a65296f3e858f4

    • SHA256

      8eba81c70c8ef73c66163f3ae57403052bfd17a4427984bbb49c75566b91a9e6

    • SHA512

      36d39017951be0125a23641acc54eb7af3107a2925d8d04428058bd73a93d69b74eb3d79431bd0ca8717e067f65aef420ef298fbbcc59bc2b24d4686fa067fbf

    • SSDEEP

      12288:eU0XI7vgbrWVQhTCYHvRktx/aICF9flefuKaO0VQ/:p/743TvRk6NwG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks