da44179d24a629f552563a9237c509d6d644bd647b1116646962aa58bc8ca548 | Triage

Sharing

General

Target

3ba07d11efb6623374b987b1ff851d80_NeikiAnalytics
Size

367KB
Sample

240510-btmkdsea46
MD5

3ba07d11efb6623374b987b1ff851d80
SHA1

6e3ec37b6ced4b3029d9480a9c812dc4b254cc1b
SHA256

da44179d24a629f552563a9237c509d6d644bd647b1116646962aa58bc8ca548
SHA512

e6fd71089be60946e846ce0ed504324ccf99b794416913024e381e8e9283498a6b88ee93fcbad4938a13c7c76fe939102fc238251d49318688c4bc6272079cc3
SSDEEP

6144:NWnMVg+uf/6FGtSoI6i8i0nxQgn6cmEFOJd+nmLpuop/0LjWIC4LYvn5:DpuX6vorJnxQg6xv+m9CjW1n5

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  3ba07d11efb6623374b987b1ff851d80_NeikiAnalytics
- Size
  
  367KB
- MD5
  
  3ba07d11efb6623374b987b1ff851d80
- SHA1
  
  6e3ec37b6ced4b3029d9480a9c812dc4b254cc1b
- SHA256
  
  da44179d24a629f552563a9237c509d6d644bd647b1116646962aa58bc8ca548
- SHA512
  
  e6fd71089be60946e846ce0ed504324ccf99b794416913024e381e8e9283498a6b88ee93fcbad4938a13c7c76fe939102fc238251d49318688c4bc6272079cc3
- SSDEEP
  
  6144:NWnMVg+uf/6FGtSoI6i8i0nxQgn6cmEFOJd+nmLpuop/0LjWIC4LYvn5:DpuX6vorJnxQg6xv+m9CjW1n5
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2