d912e7bb383e2548966fb0d2bd92df343616a0ed6cd049c1fe15bcb7d9f7d1f4 | Triage

Sharing

General

Target

e4fb63eb565865feed9d651317a7a360_NeikiAnalytics
Size

407KB
Sample

240516-tv2ptadd78
MD5

e4fb63eb565865feed9d651317a7a360
SHA1

3efc8e6e02508f402760ef1451ba8c35c6d6a383
SHA256

d912e7bb383e2548966fb0d2bd92df343616a0ed6cd049c1fe15bcb7d9f7d1f4
SHA512

44e2e82488f4fb866b6086ce3d8cc6c619950c0b0b5d7c95bd7bd59e2c6c56bc13fd2fb37efcfaeb6f5b4250a199eaa547f96d1b6a7f2c6605b4fef5b22636a0
SSDEEP

6144:KjEOrM9BMHmD1tYFLqY/W5R02qO7VKCX7F0Ko/HlEmWSMIqGNoYcpOLy:kI9+aYFLq3nX73QFEmzMoNVcELy

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  e4fb63eb565865feed9d651317a7a360_NeikiAnalytics
- Size
  
  407KB
- MD5
  
  e4fb63eb565865feed9d651317a7a360
- SHA1
  
  3efc8e6e02508f402760ef1451ba8c35c6d6a383
- SHA256
  
  d912e7bb383e2548966fb0d2bd92df343616a0ed6cd049c1fe15bcb7d9f7d1f4
- SHA512
  
  44e2e82488f4fb866b6086ce3d8cc6c619950c0b0b5d7c95bd7bd59e2c6c56bc13fd2fb37efcfaeb6f5b4250a199eaa547f96d1b6a7f2c6605b4fef5b22636a0
- SSDEEP
  
  6144:KjEOrM9BMHmD1tYFLqY/W5R02qO7VKCX7F0Ko/HlEmWSMIqGNoYcpOLy:kI9+aYFLq3nX73QFEmzMoNVcELy
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2