524cd2b4f6fe18252e706a314a8555e2d4b7258ec4fb405d24b507ade0e250b5 | Triage

Sharing

General

Target

616bd9b6116d2f22e059d501511eb240_NeikiAnalytics.exe
Size

275KB
Sample

240517-afxyjagb85
MD5

616bd9b6116d2f22e059d501511eb240
SHA1

5fc921b5eaa011f6ff862e1e4a32b81b8d7ccdb2
SHA256

524cd2b4f6fe18252e706a314a8555e2d4b7258ec4fb405d24b507ade0e250b5
SHA512

5d936255294bedf13bbe4dad08acc4baa8d944aa19a0ecabedf5a59d91d67c25f3d75ec96d4273c0998cb36cca2a3de7beb0935c84a7339ece73e5da5c02ea97
SSDEEP

6144:b6pXleUjD5FcC0qgf3ThHQJ3KWvc3bJOTfBIRSfGzp3kiheY:b6iUjD5FcEiBQ5k8zBIROQpUMe

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  616bd9b6116d2f22e059d501511eb240_NeikiAnalytics.exe
- Size
  
  275KB
- MD5
  
  616bd9b6116d2f22e059d501511eb240
- SHA1
  
  5fc921b5eaa011f6ff862e1e4a32b81b8d7ccdb2
- SHA256
  
  524cd2b4f6fe18252e706a314a8555e2d4b7258ec4fb405d24b507ade0e250b5
- SHA512
  
  5d936255294bedf13bbe4dad08acc4baa8d944aa19a0ecabedf5a59d91d67c25f3d75ec96d4273c0998cb36cca2a3de7beb0935c84a7339ece73e5da5c02ea97
- SSDEEP
  
  6144:b6pXleUjD5FcC0qgf3ThHQJ3KWvc3bJOTfBIRSfGzp3kiheY:b6iUjD5FcEiBQ5k8zBIROQpUMe
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2