General

  • Target

    0271169fbf019d862a017ceb3e9f73d0_NeikiAnalytics.exe

  • Size

    3.2MB

  • Sample

    240601-2a1wsagg2y

  • MD5

    0271169fbf019d862a017ceb3e9f73d0

  • SHA1

    b52661ba76aef3926fd77aae279de1a69ce54bea

  • SHA256

    b7c774f281fe41fda1434e493a42a10cc04e3ee2c90beef8200f7df17000aeb1

  • SHA512

    70e824e00f654c1dfa94f0eab99870f1e376e66aed7917cd069364467a0ecfd51eb9d127c71c73446ae8efd5124dec15a64eb9e71990f6705e9179a998a071cc

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB2B/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpxbVz8eLFcz

Malware Config

Targets

    • Target

      0271169fbf019d862a017ceb3e9f73d0_NeikiAnalytics.exe

    • Size

      3.2MB

    • MD5

      0271169fbf019d862a017ceb3e9f73d0

    • SHA1

      b52661ba76aef3926fd77aae279de1a69ce54bea

    • SHA256

      b7c774f281fe41fda1434e493a42a10cc04e3ee2c90beef8200f7df17000aeb1

    • SHA512

      70e824e00f654c1dfa94f0eab99870f1e376e66aed7917cd069364467a0ecfd51eb9d127c71c73446ae8efd5124dec15a64eb9e71990f6705e9179a998a071cc

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB2B/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpxbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks