General

  • Target

    8a66b250f1382980ec69b32edb5ed160_NeikiAnalytics.exe

  • Size

    949KB

  • Sample

    240523-mptnpadd65

  • MD5

    8a66b250f1382980ec69b32edb5ed160

  • SHA1

    b50bd41795df365162e2484499fe62296ebb3b09

  • SHA256

    62f9682b37f89b3613e555cf89a29a25e4c4f442ada91461d19cfcec25ffa496

  • SHA512

    142e161052be70729088e70bcfde914df8b8122050b3717587184a1f37c3289a1c35837e1aa70aa17f53564801ff5b20d5f254c46927227462e068fb2a3aafe2

  • SSDEEP

    24576:KhXiV6+BDQTYfCsSwuux3lPanAMSeJBa1QjtZRLb2DR05xu:KhX5+BlC/wj3lPanICcGjtZ9x

Score
7/10

Malware Config

Targets

    • Target

      8a66b250f1382980ec69b32edb5ed160_NeikiAnalytics.exe

    • Size

      949KB

    • MD5

      8a66b250f1382980ec69b32edb5ed160

    • SHA1

      b50bd41795df365162e2484499fe62296ebb3b09

    • SHA256

      62f9682b37f89b3613e555cf89a29a25e4c4f442ada91461d19cfcec25ffa496

    • SHA512

      142e161052be70729088e70bcfde914df8b8122050b3717587184a1f37c3289a1c35837e1aa70aa17f53564801ff5b20d5f254c46927227462e068fb2a3aafe2

    • SSDEEP

      24576:KhXiV6+BDQTYfCsSwuux3lPanAMSeJBa1QjtZRLb2DR05xu:KhX5+BlC/wj3lPanICcGjtZ9x

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks