50eedc2e7c7cdf9d366b973ce4a8d1b0d56bc5e334cf592a91700219b72f33f9 | Triage

Sharing

General

Target

85517c7eab99a97138c608e14de08030_NEIKI
Size

70KB
Sample

240508-nlek2acg26
MD5

85517c7eab99a97138c608e14de08030
SHA1

8f2d05edb7357f9f20d88848fedbefd53c118363
SHA256

50eedc2e7c7cdf9d366b973ce4a8d1b0d56bc5e334cf592a91700219b72f33f9
SHA512

31202fd33804b96bcf0735614cde21e114b9080bb1dcb845e104fe9649278c7392ea0eb87ed6b2831e46a17c6e854843fa37bda93864dba3c81edafd1b040e50
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl6+:Olg35GTslA5t3/w87+

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  85517c7eab99a97138c608e14de08030_NEIKI
- Size
  
  70KB
- MD5
  
  85517c7eab99a97138c608e14de08030
- SHA1
  
  8f2d05edb7357f9f20d88848fedbefd53c118363
- SHA256
  
  50eedc2e7c7cdf9d366b973ce4a8d1b0d56bc5e334cf592a91700219b72f33f9
- SHA512
  
  31202fd33804b96bcf0735614cde21e114b9080bb1dcb845e104fe9649278c7392ea0eb87ed6b2831e46a17c6e854843fa37bda93864dba3c81edafd1b040e50
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl6+:Olg35GTslA5t3/w87+
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan