General

  • Target

    396602524510a66384935cd82e73c090_NeikiAnalytics.exe

  • Size

    27KB

  • Sample

    240602-fez96abe7v

  • MD5

    396602524510a66384935cd82e73c090

  • SHA1

    f1acbc40594e3c9d1da220ba341227dafc8b0024

  • SHA256

    a7395b6cfa995497c2bf9891d4e3f8d439460bf2099b18f1b049104b6f751764

  • SHA512

    ab5f709e77d4c0e31ef9af3c170ec3862494243e8102a8e0dcc32ff2524c1a987974274bb39d5c8d8c9d66d697dc5be45370e79157b001b5fd88d4965bd62df9

  • SSDEEP

    768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMxSyo:N5VzcfA/6LrVpL74gfh16nUD

Malware Config

Targets

    • Target

      396602524510a66384935cd82e73c090_NeikiAnalytics.exe

    • Size

      27KB

    • MD5

      396602524510a66384935cd82e73c090

    • SHA1

      f1acbc40594e3c9d1da220ba341227dafc8b0024

    • SHA256

      a7395b6cfa995497c2bf9891d4e3f8d439460bf2099b18f1b049104b6f751764

    • SHA512

      ab5f709e77d4c0e31ef9af3c170ec3862494243e8102a8e0dcc32ff2524c1a987974274bb39d5c8d8c9d66d697dc5be45370e79157b001b5fd88d4965bd62df9

    • SSDEEP

      768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMxSyo:N5VzcfA/6LrVpL74gfh16nUD

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks