General

  • Target

    646dfd8c14df04f3fd54cf3dd6269320_NeikiAnalytics.exe

  • Size

    3.1MB

  • Sample

    240613-gv2zcsxakg

  • MD5

    646dfd8c14df04f3fd54cf3dd6269320

  • SHA1

    53aa349b068ca6841a28d6802c0edfbbdd0ff60d

  • SHA256

    7a2b05d0195a163f9fe13573af1030b63fa1419aed499303c051a8a9061d311b

  • SHA512

    37fabedb235a5b2e4a448385db61f48584a498751f445188b33d4b9b9d6b93e3ece94eadb5d855512c8c6b1c8a5a9f0eb82690bc7886c69de9a79ece72e73e70

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bSqz8b6LNXJqI20:sxX7QnxrloE5dpUp8bVz8eLFcz

Malware Config

Targets

    • Target

      646dfd8c14df04f3fd54cf3dd6269320_NeikiAnalytics.exe

    • Size

      3.1MB

    • MD5

      646dfd8c14df04f3fd54cf3dd6269320

    • SHA1

      53aa349b068ca6841a28d6802c0edfbbdd0ff60d

    • SHA256

      7a2b05d0195a163f9fe13573af1030b63fa1419aed499303c051a8a9061d311b

    • SHA512

      37fabedb235a5b2e4a448385db61f48584a498751f445188b33d4b9b9d6b93e3ece94eadb5d855512c8c6b1c8a5a9f0eb82690bc7886c69de9a79ece72e73e70

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bSqz8b6LNXJqI20:sxX7QnxrloE5dpUp8bVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks