e832d14e9a77d95fca9194483afc02b717cf86059be751c6a3dd62b4db7936e7 | Triage

Sharing

General

Target

63c566a642e74c44c20e5e6f82e1dc10_NeikiAnalytics.exe
Size

358KB
Sample

240530-ep92nsdh9z
MD5

63c566a642e74c44c20e5e6f82e1dc10
SHA1

4307bb21ed2f1b9952678395853ffc515473b878
SHA256

e832d14e9a77d95fca9194483afc02b717cf86059be751c6a3dd62b4db7936e7
SHA512

ef7bb88f313107431075707d62d3c78bd1c5d4a2873a822bd42081fef00c8674b29da8c27eb8039fdd5f2385df063356025f951c136f7cf33dc845e8ba23825b
SSDEEP

6144:ppHaR76iii0O7qcCMD67WXeumqDn8v3ayU4urg7Rz:rHaP0O7lCMD8WXIUuaJI

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  63c566a642e74c44c20e5e6f82e1dc10_NeikiAnalytics.exe
- Size
  
  358KB
- MD5
  
  63c566a642e74c44c20e5e6f82e1dc10
- SHA1
  
  4307bb21ed2f1b9952678395853ffc515473b878
- SHA256
  
  e832d14e9a77d95fca9194483afc02b717cf86059be751c6a3dd62b4db7936e7
- SHA512
  
  ef7bb88f313107431075707d62d3c78bd1c5d4a2873a822bd42081fef00c8674b29da8c27eb8039fdd5f2385df063356025f951c136f7cf33dc845e8ba23825b
- SSDEEP
  
  6144:ppHaR76iii0O7qcCMD67WXeumqDn8v3ayU4urg7Rz:rHaP0O7lCMD8WXIUuaJI
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2