General

  • Target

    abcb7adb73177198ee40693c5b26c8d0_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240523-m6gqfsdh78

  • MD5

    abcb7adb73177198ee40693c5b26c8d0

  • SHA1

    8430673d096ff1d34dc675be96a429dc6c251978

  • SHA256

    6b3f81b4a327f2f511ad80833cd2c0710be36e1a5112eddec474dd3fa9c7537b

  • SHA512

    16b6b46c277fee9284478e0e62e3b6e55b1909695d97b3b28a14cfb1eb82dd801d11d0f8461535f8bcbb74ce4cca3deaa37c933f1fef76227f24f3f5ba3f8079

  • SSDEEP

    12288:FlwUpPDsyLDJ9TagvEzYlc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:kUhzv/TaT+c+pFB5z+//ufNRoZW

Malware Config

Targets

    • Target

      abcb7adb73177198ee40693c5b26c8d0_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      abcb7adb73177198ee40693c5b26c8d0

    • SHA1

      8430673d096ff1d34dc675be96a429dc6c251978

    • SHA256

      6b3f81b4a327f2f511ad80833cd2c0710be36e1a5112eddec474dd3fa9c7537b

    • SHA512

      16b6b46c277fee9284478e0e62e3b6e55b1909695d97b3b28a14cfb1eb82dd801d11d0f8461535f8bcbb74ce4cca3deaa37c933f1fef76227f24f3f5ba3f8079

    • SSDEEP

      12288:FlwUpPDsyLDJ9TagvEzYlc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:kUhzv/TaT+c+pFB5z+//ufNRoZW

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks