General

  • Target

    5a3fcdbda47a523eee4e5e94c8b0d450_NeikiAnalytics.exe

  • Size

    4.0MB

  • Sample

    240613-dt53vaseme

  • MD5

    5a3fcdbda47a523eee4e5e94c8b0d450

  • SHA1

    63fd41c240172336f5e932b116ec3138749df146

  • SHA256

    579821fc4cd29413f7f7d1b5ad7d8877d48f73b030171d9c6479a3431bc8e35b

  • SHA512

    36985137af80b8e0050172404a38533a548e1f7c882c36dd44d7c5c325033f172703b5faf2ee03ed5b77f8352c1c1767d58c6af9bb7b2b2c82c4e5a6a0e1360d

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBJB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpGbVz8eLFcz

Malware Config

Targets

    • Target

      5a3fcdbda47a523eee4e5e94c8b0d450_NeikiAnalytics.exe

    • Size

      4.0MB

    • MD5

      5a3fcdbda47a523eee4e5e94c8b0d450

    • SHA1

      63fd41c240172336f5e932b116ec3138749df146

    • SHA256

      579821fc4cd29413f7f7d1b5ad7d8877d48f73b030171d9c6479a3431bc8e35b

    • SHA512

      36985137af80b8e0050172404a38533a548e1f7c882c36dd44d7c5c325033f172703b5faf2ee03ed5b77f8352c1c1767d58c6af9bb7b2b2c82c4e5a6a0e1360d

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBJB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpGbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks