General

  • Target

    95ff66f0cfacba909a1d67dd52f4c6e883fdc381b1724fe9fcc7882c7ce12e86_NeikiAnalytics.exe

  • Size

    1.6MB

  • Sample

    240628-nrc96azfkr

  • MD5

    d5ad7e10128600261a921b0c8c004490

  • SHA1

    909f6b7600010ad5d8efb5b51730c5710e8ffa11

  • SHA256

    95ff66f0cfacba909a1d67dd52f4c6e883fdc381b1724fe9fcc7882c7ce12e86

  • SHA512

    db44e41dc12c3fa3244ee168b17d583e768301a104f3cb4f4de4c4e597ad4326f8d6c0ca3f8e20cc39d4d680f4a0a0e6e1a90270a12d2ce3b3e5f8c232ebb8fa

  • SSDEEP

    24576:VUozv/TaTKzr8EzERVY7zpCGSbvdfvDJO5:VUOnTTzr8+ER49CGSjJd

Malware Config

Targets

    • Target

      95ff66f0cfacba909a1d67dd52f4c6e883fdc381b1724fe9fcc7882c7ce12e86_NeikiAnalytics.exe

    • Size

      1.6MB

    • MD5

      d5ad7e10128600261a921b0c8c004490

    • SHA1

      909f6b7600010ad5d8efb5b51730c5710e8ffa11

    • SHA256

      95ff66f0cfacba909a1d67dd52f4c6e883fdc381b1724fe9fcc7882c7ce12e86

    • SHA512

      db44e41dc12c3fa3244ee168b17d583e768301a104f3cb4f4de4c4e597ad4326f8d6c0ca3f8e20cc39d4d680f4a0a0e6e1a90270a12d2ce3b3e5f8c232ebb8fa

    • SSDEEP

      24576:VUozv/TaTKzr8EzERVY7zpCGSbvdfvDJO5:VUOnTTzr8+ER49CGSjJd

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks