a4da9413c667bb5da30cbd750e81712e4bdcddc702965e73988edb2c93808c59 | Triage

Sharing

General

Target

a4da9413c667bb5da30cbd750e81712e4bdcddc702965e73988edb2c93808c59_NeikiAnalytics.exe
Size

4.1MB
Sample

240628-wsz5ba1drn
MD5

19ae732d10cf23f2656aaf0e84bba240
SHA1

c0ca858bd21aac14fe3c07b04fb88cebee806600
SHA256

a4da9413c667bb5da30cbd750e81712e4bdcddc702965e73988edb2c93808c59
SHA512

36089869abd2c7c7cccfcf21f525c9416faebe6cec01ab49aafcea165c540db60d6f4565e367b64cc71af5db7dae88ec7c089d6ea203b67e7f8b6106cebbe440
SSDEEP

49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBZB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpGbVz8eLFcz

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  a4da9413c667bb5da30cbd750e81712e4bdcddc702965e73988edb2c93808c59_NeikiAnalytics.exe
- Size
  
  4.1MB
- MD5
  
  19ae732d10cf23f2656aaf0e84bba240
- SHA1
  
  c0ca858bd21aac14fe3c07b04fb88cebee806600
- SHA256
  
  a4da9413c667bb5da30cbd750e81712e4bdcddc702965e73988edb2c93808c59
- SHA512
  
  36089869abd2c7c7cccfcf21f525c9416faebe6cec01ab49aafcea165c540db60d6f4565e367b64cc71af5db7dae88ec7c089d6ea203b67e7f8b6106cebbe440
- SSDEEP
  
  49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBZB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpGbVz8eLFcz
Score

7^/10

persistence spyware stealer
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer