General

  • Target

    4a1470cf0316d38e1fbc8d3617851490_NeikiAnalytics.exe

  • Size

    622KB

  • Sample

    240617-faahyavcrb

  • MD5

    4a1470cf0316d38e1fbc8d3617851490

  • SHA1

    1ed5a1088f93d6b36498409789e74a1b8658dd6c

  • SHA256

    ca0013c9d8ca586feb5ba1fa24270d912ac51882785a27f39cea28d228b1e463

  • SHA512

    0dafbdecda2864609bc706007dbe346eabd712a72f07b37c674cf89eaadb1294a54f5774f7a33da3d779f5358f4f23c957933dc7f4d485f2b49ad0861dcbecf9

  • SSDEEP

    12288:Lgq7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+9:LgqCks7WE9F5pwg8zmdqQjC60jiHkU

Score
7/10

Malware Config

Targets

    • Target

      4a1470cf0316d38e1fbc8d3617851490_NeikiAnalytics.exe

    • Size

      622KB

    • MD5

      4a1470cf0316d38e1fbc8d3617851490

    • SHA1

      1ed5a1088f93d6b36498409789e74a1b8658dd6c

    • SHA256

      ca0013c9d8ca586feb5ba1fa24270d912ac51882785a27f39cea28d228b1e463

    • SHA512

      0dafbdecda2864609bc706007dbe346eabd712a72f07b37c674cf89eaadb1294a54f5774f7a33da3d779f5358f4f23c957933dc7f4d485f2b49ad0861dcbecf9

    • SSDEEP

      12288:Lgq7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+9:LgqCks7WE9F5pwg8zmdqQjC60jiHkU

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks