General

  • Target

    907079cb29ba5114e3cafe72e259ac30_NeikiAnalytics.exe

  • Size

    1.6MB

  • Sample

    240601-gx225sda67

  • MD5

    907079cb29ba5114e3cafe72e259ac30

  • SHA1

    e83d77dbf826adf446b16a97ef875fa42af1dfb7

  • SHA256

    bf90c7a98e3525aaeca2b809da82ae8287c52873a36b2bc3ce69c5404d55b77a

  • SHA512

    1ba4247e9efa51c7709c5006a1cacc1a7e2f151af0081cdaaea03614717f2eb3ad2fd094d78b8b01e7a0022f9bfda31e562bd4e28d95291770624f2079d49d30

  • SSDEEP

    24576:D3oH6RhNF4Xx7AIsqjnhMgeiCl7G0nehbGZpbD:joH0FEBA0Dmg27RnWGj

Malware Config

Targets

    • Target

      907079cb29ba5114e3cafe72e259ac30_NeikiAnalytics.exe

    • Size

      1.6MB

    • MD5

      907079cb29ba5114e3cafe72e259ac30

    • SHA1

      e83d77dbf826adf446b16a97ef875fa42af1dfb7

    • SHA256

      bf90c7a98e3525aaeca2b809da82ae8287c52873a36b2bc3ce69c5404d55b77a

    • SHA512

      1ba4247e9efa51c7709c5006a1cacc1a7e2f151af0081cdaaea03614717f2eb3ad2fd094d78b8b01e7a0022f9bfda31e562bd4e28d95291770624f2079d49d30

    • SSDEEP

      24576:D3oH6RhNF4Xx7AIsqjnhMgeiCl7G0nehbGZpbD:joH0FEBA0Dmg27RnWGj

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Registers COM server for autorun

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks