General

  • Target

    5467f6562b47cc32166a5ead3cdf2a10_NeikiAnalytics.exe

  • Size

    1.7MB

  • Sample

    240522-26phmacf57

  • MD5

    5467f6562b47cc32166a5ead3cdf2a10

  • SHA1

    d47a7b72e6bfa6bd582b17d7b69edd458bcab4d1

  • SHA256

    bf78813c8ad164b90229f801cfda6c7885251ae056d9c62994275cc930c75682

  • SHA512

    53b4d7654030081af8a3791ab314a33a895a72fd3b91e594ab359270080a7d4b24aa4f46b91a887bf1d80096d7994227a1e580fb82b519ceccefb67b37943578

  • SSDEEP

    24576:Cm3YCdCTYlT8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:H3YCUTYgDUYmvFur31yAipQCtXxc0H

Malware Config

Targets

    • Target

      5467f6562b47cc32166a5ead3cdf2a10_NeikiAnalytics.exe

    • Size

      1.7MB

    • MD5

      5467f6562b47cc32166a5ead3cdf2a10

    • SHA1

      d47a7b72e6bfa6bd582b17d7b69edd458bcab4d1

    • SHA256

      bf78813c8ad164b90229f801cfda6c7885251ae056d9c62994275cc930c75682

    • SHA512

      53b4d7654030081af8a3791ab314a33a895a72fd3b91e594ab359270080a7d4b24aa4f46b91a887bf1d80096d7994227a1e580fb82b519ceccefb67b37943578

    • SSDEEP

      24576:Cm3YCdCTYlT8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:H3YCUTYgDUYmvFur31yAipQCtXxc0H

    • Executes dropped EXE

    • Modifies file permissions

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

File and Directory Permissions Modification

1
T1222

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Collection

Data from Local System

1
T1005

Tasks