ffd54c0047d16f0919d357e2bfcccff4747c93b064039a61fb8027070f64e0f0 | Triage

Sharing

General

Target

2ebe540da3580db338a4976a7ac23700_NeikiAnalytics.exe
Size

872KB
Sample

240528-dawp3adb49
MD5

2ebe540da3580db338a4976a7ac23700
SHA1

d63d60208803f7be2409ed34bef2f48d2e8a1a0e
SHA256

ffd54c0047d16f0919d357e2bfcccff4747c93b064039a61fb8027070f64e0f0
SHA512

cf206b108eac8c989d046d219ce31720d5ee6d39880f1630603da91cd7860291b8a1e90651816b7481a6cdf06f7fc36b85350745ef5bb6a90c51badf535f2e55
SSDEEP

24576:CbQLHpFN7j9Ll11tmlNQ2OnBdFQtP51llPup33kT:yIN7jb11tmlNQ2ayVup3

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2ebe540da3580db338a4976a7ac23700_NeikiAnalytics.exe
- Size
  
  872KB
- MD5
  
  2ebe540da3580db338a4976a7ac23700
- SHA1
  
  d63d60208803f7be2409ed34bef2f48d2e8a1a0e
- SHA256
  
  ffd54c0047d16f0919d357e2bfcccff4747c93b064039a61fb8027070f64e0f0
- SHA512
  
  cf206b108eac8c989d046d219ce31720d5ee6d39880f1630603da91cd7860291b8a1e90651816b7481a6cdf06f7fc36b85350745ef5bb6a90c51badf535f2e55
- SSDEEP
  
  24576:CbQLHpFN7j9Ll11tmlNQ2OnBdFQtP51llPup33kT:yIN7jb11tmlNQ2ayVup3
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks for any installed AV software in registry
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Software Discovery

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1