General

  • Target

    c23164dbedc67bcd12876522f55dbf10_NeikiAnalytics.exe

  • Size

    3.0MB

  • Sample

    240608-rtf1lsdd22

  • MD5

    c23164dbedc67bcd12876522f55dbf10

  • SHA1

    6c2396cdaf58c0b888824c1fc047423f7745b620

  • SHA256

    989995251f92b2d1b6d8ff4a588b76f8a462dab65cb4870c0a9dad27056a30ec

  • SHA512

    84b376102004559a09427cb6b2c00eb9ac9f15656af892c5c26175fd17fdd793e7f1bb55f466c1264af9f7da983093d87106fb52aa46ac81fdf60ff4779c72c3

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBGB/bSqz8b6LNX:sxX7QnxrloE5dpUpdbVz8eLF

Malware Config

Targets

    • Target

      c23164dbedc67bcd12876522f55dbf10_NeikiAnalytics.exe

    • Size

      3.0MB

    • MD5

      c23164dbedc67bcd12876522f55dbf10

    • SHA1

      6c2396cdaf58c0b888824c1fc047423f7745b620

    • SHA256

      989995251f92b2d1b6d8ff4a588b76f8a462dab65cb4870c0a9dad27056a30ec

    • SHA512

      84b376102004559a09427cb6b2c00eb9ac9f15656af892c5c26175fd17fdd793e7f1bb55f466c1264af9f7da983093d87106fb52aa46ac81fdf60ff4779c72c3

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBGB/bSqz8b6LNX:sxX7QnxrloE5dpUpdbVz8eLF

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks