General

  • Target

    12f9636ce18ef59f903f587836660310_NeikiAnalytics.exe

  • Size

    656KB

  • Sample

    240524-xrjllsff7v

  • MD5

    12f9636ce18ef59f903f587836660310

  • SHA1

    6b37fe57ac1d8d658601398b7e1a6e792dfab561

  • SHA256

    70a196162a97c02b64e0c4f2e988f1c461340e2957fb8366665695e8ebce966f

  • SHA512

    5476a4176dc244bbbbe1556fc2c59e3de72cd484697dfc08455f0746c5b930d7079d8cbf0433941fb21c83a52e5fdfeb49a3d8a0a760cfb7f2c32d42958fe373

  • SSDEEP

    12288:3EZjg47NLD7bHVKMQ4O4vSjNsyMLpRNO2FLzTGT/SRel8lkEoiqAj:0ZrxX7bHsMQ4/O6yMLprOInyT/Swl8Mg

Score
7/10

Malware Config

Targets

    • Target

      12f9636ce18ef59f903f587836660310_NeikiAnalytics.exe

    • Size

      656KB

    • MD5

      12f9636ce18ef59f903f587836660310

    • SHA1

      6b37fe57ac1d8d658601398b7e1a6e792dfab561

    • SHA256

      70a196162a97c02b64e0c4f2e988f1c461340e2957fb8366665695e8ebce966f

    • SHA512

      5476a4176dc244bbbbe1556fc2c59e3de72cd484697dfc08455f0746c5b930d7079d8cbf0433941fb21c83a52e5fdfeb49a3d8a0a760cfb7f2c32d42958fe373

    • SSDEEP

      12288:3EZjg47NLD7bHVKMQ4O4vSjNsyMLpRNO2FLzTGT/SRel8lkEoiqAj:0ZrxX7bHsMQ4/O6yMLprOInyT/Swl8Mg

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks