8c5ea0e3ecce3a2cc93f2c32dcd262c4ce5b967c2f0ec4ed92075d917d5962d1 | Triage

Sharing

General

Target

5a2793832fb8bb64925870a580293ba0_NeikiAnalytics
Size

360KB
Sample

240512-zpvxzaad72
MD5

5a2793832fb8bb64925870a580293ba0
SHA1

91f7623432b66b6e22db648707214669ef172a5d
SHA256

8c5ea0e3ecce3a2cc93f2c32dcd262c4ce5b967c2f0ec4ed92075d917d5962d1
SHA512

2657d3c1a75cc4b125773a70487701c158631abcab0d825e7c66005f26181ef305058c0d1e500e62853e2f453e18d55c24f36a0655f94e046db21aa1b9cfa2da
SSDEEP

6144:xsubohDCssG3LAUul99UM8KDBuvWtuj2XMSV0L0huFUNpNNepnsOpXKkA1b:PmCssG75ul99sEBSWtM2JqL0huFULNNl

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  5a2793832fb8bb64925870a580293ba0_NeikiAnalytics
- Size
  
  360KB
- MD5
  
  5a2793832fb8bb64925870a580293ba0
- SHA1
  
  91f7623432b66b6e22db648707214669ef172a5d
- SHA256
  
  8c5ea0e3ecce3a2cc93f2c32dcd262c4ce5b967c2f0ec4ed92075d917d5962d1
- SHA512
  
  2657d3c1a75cc4b125773a70487701c158631abcab0d825e7c66005f26181ef305058c0d1e500e62853e2f453e18d55c24f36a0655f94e046db21aa1b9cfa2da
- SSDEEP
  
  6144:xsubohDCssG3LAUul99UM8KDBuvWtuj2XMSV0L0huFUNpNNepnsOpXKkA1b:PmCssG75ul99sEBSWtM2JqL0huFULNNl
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2