General

  • Target

    6562e53e11507d75e9f37f331e3df230_NeikiAnalytics.exe

  • Size

    2.6MB

  • Sample

    240613-g6r9as1flr

  • MD5

    6562e53e11507d75e9f37f331e3df230

  • SHA1

    e0749500154afbada6bca67ec2c2e691a6cb6999

  • SHA256

    edcdc709fa056888976d89d4c1738e0d4e5ce2cb9221130d460be7627af130f7

  • SHA512

    debbb6c0a7fab678ea1bd8e1c723f2e91998edd04a25dd3bff83d24c11bd7d51001826124d921ba9a6f89d3a12f0d3c9a41e89fe24d66a48a6b119c0fc1e43f4

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBiB/bS:sxX7QnxrloE5dpUppb

Malware Config

Targets

    • Target

      6562e53e11507d75e9f37f331e3df230_NeikiAnalytics.exe

    • Size

      2.6MB

    • MD5

      6562e53e11507d75e9f37f331e3df230

    • SHA1

      e0749500154afbada6bca67ec2c2e691a6cb6999

    • SHA256

      edcdc709fa056888976d89d4c1738e0d4e5ce2cb9221130d460be7627af130f7

    • SHA512

      debbb6c0a7fab678ea1bd8e1c723f2e91998edd04a25dd3bff83d24c11bd7d51001826124d921ba9a6f89d3a12f0d3c9a41e89fe24d66a48a6b119c0fc1e43f4

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBiB/bS:sxX7QnxrloE5dpUppb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks