Overview

overview

7

Static

static

3

23b55b7109...cs.dll

windows7-x64

7

23b55b7109...cs.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23b55b7109bb86533b37ba3f8d61bcd0_NeikiAnalytics.exe

  • Size

    542KB

  • Sample

    240527-hpvtjabf5w

  • MD5

    23b55b7109bb86533b37ba3f8d61bcd0

  • SHA1

    04c599dc5d654bd6a10db5742d2962733ca61102

  • SHA256

    e495175c73d75258752777689833ee4b699cab3c6c0c658ded795d7fe7ca0e6e

  • SHA512

    8367f75ef9a6156cc857f442718abb7686d5b12143f031b675b29677c5ef3c7226cf23780fe1746abb541f519b623522b8f3f1e8fd86caa97f568c335bb04c22

  • SSDEEP

    12288:opzIK6IkD5lQbM+vJwg1HlLAHymgXx70WrLfQtv14HXqg9zfXrukGUlLJTeUqP:iV6oQ+vJwg1HlLAHymgXx70WrLfQtv10

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      23b55b7109bb86533b37ba3f8d61bcd0_NeikiAnalytics.exe

    • Size

      542KB

    • MD5

      23b55b7109bb86533b37ba3f8d61bcd0

    • SHA1

      04c599dc5d654bd6a10db5742d2962733ca61102

    • SHA256

      e495175c73d75258752777689833ee4b699cab3c6c0c658ded795d7fe7ca0e6e

    • SHA512

      8367f75ef9a6156cc857f442718abb7686d5b12143f031b675b29677c5ef3c7226cf23780fe1746abb541f519b623522b8f3f1e8fd86caa97f568c335bb04c22

    • SSDEEP

      12288:opzIK6IkD5lQbM+vJwg1HlLAHymgXx70WrLfQtv14HXqg9zfXrukGUlLJTeUqP:iV6oQ+vJwg1HlLAHymgXx70WrLfQtv10

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks