e708b9a1e66e390fb9cef6ddf1e39de6dbaeb37d4d74bc09d81f53b0b7014432 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e9bca3540c8bd2985c8ad2807d6b730_NEIKI
Size

72KB
Sample

240507-1gcxvsbh67
MD5

3e9bca3540c8bd2985c8ad2807d6b730
SHA1

bc092124466bb50a9651bbd8bf76b26e63370f35
SHA256

e708b9a1e66e390fb9cef6ddf1e39de6dbaeb37d4d74bc09d81f53b0b7014432
SHA512

696e6d731490e8625877d5370003a097b75c318673607bfe88d765b7d12bbdd6d8ad3e5001aa1f86ecd51035343f903c4109042c731f6c6f431808da3a717c74
SSDEEP

768:x/nEuhThEUAvMgvvd9WhTOng8X6m2AYS1rg1YJZLIgwRdPxCdYLndQxzGp5hhJyQ:xs0evMm+tgg1XS181xbGgdjhh9ZoPbU

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  3e9bca3540c8bd2985c8ad2807d6b730_NEIKI
- Size
  
  72KB
- MD5
  
  3e9bca3540c8bd2985c8ad2807d6b730
- SHA1
  
  bc092124466bb50a9651bbd8bf76b26e63370f35
- SHA256
  
  e708b9a1e66e390fb9cef6ddf1e39de6dbaeb37d4d74bc09d81f53b0b7014432
- SHA512
  
  696e6d731490e8625877d5370003a097b75c318673607bfe88d765b7d12bbdd6d8ad3e5001aa1f86ecd51035343f903c4109042c731f6c6f431808da3a717c74
- SSDEEP
  
  768:x/nEuhThEUAvMgvvd9WhTOng8X6m2AYS1rg1YJZLIgwRdPxCdYLndQxzGp5hhJyQ:xs0evMm+tgg1XS181xbGgdjhh9ZoPbU
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan