General

  • Target

    18b14acf01db540943cf186a9124f020_NeikiAnalytics.exe

  • Size

    102KB

  • Sample

    240517-xjq1qadd5w

  • MD5

    18b14acf01db540943cf186a9124f020

  • SHA1

    17913039a7caebd8c7c6d5a1586dd5940e9bbe47

  • SHA256

    addb78f4b16faeaaee846c35b6fcfe413eba4925e98c6cc236dd4f693644956a

  • SHA512

    397e334540c77084d71f15c524bf4b5c597f56949f4f06d7021b4d53d33ef009aa6de942da2c6041b128301cdb38caff93b3be98a7c2eeb9a8ca10e2019ecd92

  • SSDEEP

    1536:JxqjQ+P04wsmJC0WN/do8S5q7Q98fI+mtAC2d3WwzxB2lMyjz01:sr85ChN/do8KXmFslMy81

Malware Config

Targets

    • Target

      18b14acf01db540943cf186a9124f020_NeikiAnalytics.exe

    • Size

      102KB

    • MD5

      18b14acf01db540943cf186a9124f020

    • SHA1

      17913039a7caebd8c7c6d5a1586dd5940e9bbe47

    • SHA256

      addb78f4b16faeaaee846c35b6fcfe413eba4925e98c6cc236dd4f693644956a

    • SHA512

      397e334540c77084d71f15c524bf4b5c597f56949f4f06d7021b4d53d33ef009aa6de942da2c6041b128301cdb38caff93b3be98a7c2eeb9a8ca10e2019ecd92

    • SSDEEP

      1536:JxqjQ+P04wsmJC0WN/do8S5q7Q98fI+mtAC2d3WwzxB2lMyjz01:sr85ChN/do8KXmFslMy81

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks