General

  • Target

    59d4671c38e519861228fc57760d1210_NeikiAnalytics.exe

  • Size

    3.6MB

  • Sample

    240613-dpx7fawcmj

  • MD5

    59d4671c38e519861228fc57760d1210

  • SHA1

    e7682112c81405fc5127bb1e67916cdb5c04a0f7

  • SHA256

    b8335b8e6a552f06ebca92ca9aa24e98bc2d920d0eb8adb7715cc28d4bb9c227

  • SHA512

    535226f103289a5a7a17d2eb8dd4f25a9cec84532079c1463add2150b7dd31222ab8812c4dfbd25fb634222f2e04975a6ad88a5689563aff7eaa67c3b33ff771

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBuB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpxbVz8eLFcz

Malware Config

Targets

    • Target

      59d4671c38e519861228fc57760d1210_NeikiAnalytics.exe

    • Size

      3.6MB

    • MD5

      59d4671c38e519861228fc57760d1210

    • SHA1

      e7682112c81405fc5127bb1e67916cdb5c04a0f7

    • SHA256

      b8335b8e6a552f06ebca92ca9aa24e98bc2d920d0eb8adb7715cc28d4bb9c227

    • SHA512

      535226f103289a5a7a17d2eb8dd4f25a9cec84532079c1463add2150b7dd31222ab8812c4dfbd25fb634222f2e04975a6ad88a5689563aff7eaa67c3b33ff771

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBuB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpxbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks