8df6794b6ce878fc8d0ac63c378d2014dcd54a08d58358ffde83fac937ef40f9 | Triage

Sharing

General

Target

7a4122e621e12ce07734e64b85d188a0_NeikiAnalytics.exe
Size

332KB
Sample

240523-c6sgvaba3v
MD5

7a4122e621e12ce07734e64b85d188a0
SHA1

9dd7337b13792b1faa6c6751339927b2c51e85df
SHA256

8df6794b6ce878fc8d0ac63c378d2014dcd54a08d58358ffde83fac937ef40f9
SHA512

186fa4d6b9c9bd21f336d42e0a4c7284571748c532386431083c7ff62275461a415fbef29d87cbf592fd3b510e654499082528349f1792ce0faf83280f3207cc
SSDEEP

6144:yE9yXX91NogTTm7HyHBm3fzQS+RZ5eDOqyq5efV7+3nWkredKpluyEKMaR/HX5:yQyXX91NoBSHBm3LQfRZ5eDxyqQdK3n3

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  7a4122e621e12ce07734e64b85d188a0_NeikiAnalytics.exe
- Size
  
  332KB
- MD5
  
  7a4122e621e12ce07734e64b85d188a0
- SHA1
  
  9dd7337b13792b1faa6c6751339927b2c51e85df
- SHA256
  
  8df6794b6ce878fc8d0ac63c378d2014dcd54a08d58358ffde83fac937ef40f9
- SHA512
  
  186fa4d6b9c9bd21f336d42e0a4c7284571748c532386431083c7ff62275461a415fbef29d87cbf592fd3b510e654499082528349f1792ce0faf83280f3207cc
- SSDEEP
  
  6144:yE9yXX91NogTTm7HyHBm3fzQS+RZ5eDOqyq5efV7+3nWkredKpluyEKMaR/HX5:yQyXX91NoBSHBm3LQfRZ5eDxyqQdK3n3
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2