General

  • Target

    95e907e43b3f458f757a1e692f968c60_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240523-mqa8qsdd7t

  • MD5

    95e907e43b3f458f757a1e692f968c60

  • SHA1

    6e61388f9c28f47765ae015f78e1cc1c3b967a14

  • SHA256

    aabf79eb1341ee34e2f5483fd24d63d288b6501a36a5018c008915fd1e865238

  • SHA512

    bad6ab34836c9edcb4fd6b217b7f412a7dc5eca4869c9fc7863e09096cf586c160daf1be7d62298577dda0b15ba729643805ff2102d3df42901163594b8e073a

  • SSDEEP

    12288:roBCbwOSbwoqg0fitGbna8dQcLk/+cb1q86pJDlAF44bE2cSX:roBDnbl0fitGbna8FLk2m1X2D4brr

Score
7/10

Malware Config

Targets

    • Target

      95e907e43b3f458f757a1e692f968c60_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      95e907e43b3f458f757a1e692f968c60

    • SHA1

      6e61388f9c28f47765ae015f78e1cc1c3b967a14

    • SHA256

      aabf79eb1341ee34e2f5483fd24d63d288b6501a36a5018c008915fd1e865238

    • SHA512

      bad6ab34836c9edcb4fd6b217b7f412a7dc5eca4869c9fc7863e09096cf586c160daf1be7d62298577dda0b15ba729643805ff2102d3df42901163594b8e073a

    • SSDEEP

      12288:roBCbwOSbwoqg0fitGbna8dQcLk/+cb1q86pJDlAF44bE2cSX:roBDnbl0fitGbna8FLk2m1X2D4brr

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks