General

  • Target

    9dd3ca273184d762aa13d168e9cba520_NeikiAnalytics.exe

  • Size

    3.2MB

  • Sample

    240603-gne61sdh8v

  • MD5

    9dd3ca273184d762aa13d168e9cba520

  • SHA1

    75987213d04acbb9278b46b97e79b7180a1f0819

  • SHA256

    6b3736ddd8920a360ca169693dae337c54d2ac5bcc0070635cc9176daafecb8a

  • SHA512

    92bdb6fe8328b486df63b7b0a229036acebd80a57f7a42505c06d9a28414ac3ca1ff1a1404820d5069ee77dc2104b97ca0353de6469bb229a03318c3ccca1bb1

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBaB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUphbVz8eLFcz

Malware Config

Targets

    • Target

      9dd3ca273184d762aa13d168e9cba520_NeikiAnalytics.exe

    • Size

      3.2MB

    • MD5

      9dd3ca273184d762aa13d168e9cba520

    • SHA1

      75987213d04acbb9278b46b97e79b7180a1f0819

    • SHA256

      6b3736ddd8920a360ca169693dae337c54d2ac5bcc0070635cc9176daafecb8a

    • SHA512

      92bdb6fe8328b486df63b7b0a229036acebd80a57f7a42505c06d9a28414ac3ca1ff1a1404820d5069ee77dc2104b97ca0353de6469bb229a03318c3ccca1bb1

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBaB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUphbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks