General

  • Target

    214a4c47845f4050a5eae537e622ef80_NeikiAnalytics.exe

  • Size

    6.0MB

  • Sample

    240527-gkbpesba87

  • MD5

    214a4c47845f4050a5eae537e622ef80

  • SHA1

    847b7441ed9186266f76fe7aad62ebd0420004a2

  • SHA256

    5137025eeb3fa3347ea7704dd2adfb061319346b9f19c4d4cd7b1f7b9a5f0601

  • SHA512

    b9738491782f92c84db3a668118c8bc5d4921eeb6b5957676074514309788cb84423dfd3b8072e7d1a4f01499e7d02ee04013e2a168fcc15fd1eb40b22ddf123

  • SSDEEP

    196608:27wqheSVYK/bua/BlWWnuVhsus8nm+q4Pt:28qgSmIbr/Asb8nmF

Score
7/10

Malware Config

Targets

    • Target

      214a4c47845f4050a5eae537e622ef80_NeikiAnalytics.exe

    • Size

      6.0MB

    • MD5

      214a4c47845f4050a5eae537e622ef80

    • SHA1

      847b7441ed9186266f76fe7aad62ebd0420004a2

    • SHA256

      5137025eeb3fa3347ea7704dd2adfb061319346b9f19c4d4cd7b1f7b9a5f0601

    • SHA512

      b9738491782f92c84db3a668118c8bc5d4921eeb6b5957676074514309788cb84423dfd3b8072e7d1a4f01499e7d02ee04013e2a168fcc15fd1eb40b22ddf123

    • SSDEEP

      196608:27wqheSVYK/bua/BlWWnuVhsus8nm+q4Pt:28qgSmIbr/Asb8nmF

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks