General

  • Target

    4298990c19de3b16b5244a7d489ca7a0_NeikiAnalytics

  • Size

    1.7MB

  • Sample

    240514-ay4tssce89

  • MD5

    4298990c19de3b16b5244a7d489ca7a0

  • SHA1

    fb758d4b7980a694c58e1c8cac578f60e92c3b30

  • SHA256

    d46de887a3a472f3f6eff6f8d44c150b22d005ae6ac4fcf945abec817fc42ece

  • SHA512

    91c527ef566c0a7b71cef9a390295b69c5a6c0afe310f84150215a6d419cd86b2f6bb9456cc4f0cf80b2322df71a457510f85dfb754ef726ddeba1cbc5c0f7d1

  • SSDEEP

    24576:FULzv/TaTRTNjx+mZCkt76f/24pN+XNqNG6hditW:FUvnTef9Ckt7c20+9qNxUW

Malware Config

Targets

    • Target

      4298990c19de3b16b5244a7d489ca7a0_NeikiAnalytics

    • Size

      1.7MB

    • MD5

      4298990c19de3b16b5244a7d489ca7a0

    • SHA1

      fb758d4b7980a694c58e1c8cac578f60e92c3b30

    • SHA256

      d46de887a3a472f3f6eff6f8d44c150b22d005ae6ac4fcf945abec817fc42ece

    • SHA512

      91c527ef566c0a7b71cef9a390295b69c5a6c0afe310f84150215a6d419cd86b2f6bb9456cc4f0cf80b2322df71a457510f85dfb754ef726ddeba1cbc5c0f7d1

    • SSDEEP

      24576:FULzv/TaTRTNjx+mZCkt76f/24pN+XNqNG6hditW:FUvnTef9Ckt7c20+9qNxUW

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks