aff9cad071835051305a8fe8fbc09fd23a738f19dfc0ff0510a4210dba58e315 | Triage

Sharing

General

Target

aff9cad071835051305a8fe8fbc09fd23a738f19dfc0ff0510a4210dba58e315_NeikiAnalytics.exe
Size

1.0MB
Sample

240629-r69tfssfqk
MD5

5420d84c11643c1899631ecb369cd910
SHA1

89edb5c069a564461e9085e01de63a55da3b0846
SHA256

aff9cad071835051305a8fe8fbc09fd23a738f19dfc0ff0510a4210dba58e315
SHA512

dad3c5e4d15bfc1d1762eb58df59d878bf382e2b019af060fbb039aa004f1ce0cdc4658b79a0a211de3b30a092d589bf3ff1fcaf0191ec1011974f29ac65bc4f
SSDEEP

24576:DvcdRN+yQI6AiCjdqxs0AtF+mIq3T2dWsm3n09:7O2/y0AtY/qaosmk

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  aff9cad071835051305a8fe8fbc09fd23a738f19dfc0ff0510a4210dba58e315_NeikiAnalytics.exe
- Size
  
  1.0MB
- MD5
  
  5420d84c11643c1899631ecb369cd910
- SHA1
  
  89edb5c069a564461e9085e01de63a55da3b0846
- SHA256
  
  aff9cad071835051305a8fe8fbc09fd23a738f19dfc0ff0510a4210dba58e315
- SHA512
  
  dad3c5e4d15bfc1d1762eb58df59d878bf382e2b019af060fbb039aa004f1ce0cdc4658b79a0a211de3b30a092d589bf3ff1fcaf0191ec1011974f29ac65bc4f
- SSDEEP
  
  24576:DvcdRN+yQI6AiCjdqxs0AtF+mIq3T2dWsm3n09:7O2/y0AtY/qaosmk
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2