6a04be1c1281259ed6a51e81a5278525b462e452f6831fb000484f3457082d69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a04be1c1281259ed6a51e81a5278525b462e452f6831fb000484f3457082d69_NeikiAnalytics.exe
Size

3.6MB
Sample

240624-nbvt9sygmg
MD5

3ab915d36c68cf1f4615dbd9a1750920
SHA1

ce3cbccff3d8200032618f5a8e1e5a8bef955006
SHA256

6a04be1c1281259ed6a51e81a5278525b462e452f6831fb000484f3457082d69
SHA512

a5af1009e02de9a88873f3346da80f3a292a125454427d5fb949976e8bec34d4858db34118dda9ac0c36573a27b186dd455521dfd2df86b473d34258ff91e90c
SSDEEP

49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBQB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpjbVz8eLFcz

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  6a04be1c1281259ed6a51e81a5278525b462e452f6831fb000484f3457082d69_NeikiAnalytics.exe
- Size
  
  3.6MB
- MD5
  
  3ab915d36c68cf1f4615dbd9a1750920
- SHA1
  
  ce3cbccff3d8200032618f5a8e1e5a8bef955006
- SHA256
  
  6a04be1c1281259ed6a51e81a5278525b462e452f6831fb000484f3457082d69
- SHA512
  
  a5af1009e02de9a88873f3346da80f3a292a125454427d5fb949976e8bec34d4858db34118dda9ac0c36573a27b186dd455521dfd2df86b473d34258ff91e90c
- SSDEEP
  
  49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBQB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpjbVz8eLFcz
Score

7^/10

persistence spyware stealer
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer