32e034eb4943579a1dda3ce9c42622ea972861ca81637f951470584b257f71b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55db8332ab7994b8529b878c08f4cd10_NEIKI
Size

208KB
Sample

240508-z13f7aac47
MD5

55db8332ab7994b8529b878c08f4cd10
SHA1

479fc26ec941455d25a596445192a80f0980f187
SHA256

32e034eb4943579a1dda3ce9c42622ea972861ca81637f951470584b257f71b5
SHA512

f8c9b5e332e7e915b72ba65b2eb07ed104bf17da221a91cbe21d0fde986b4d3dbf303afd71b09698af99381cdcfacb750270e529dd8a7c03e719738e95956a8f
SSDEEP

6144:fZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5:xquCuygMQjd5vJIBP1

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  55db8332ab7994b8529b878c08f4cd10_NEIKI
- Size
  
  208KB
- MD5
  
  55db8332ab7994b8529b878c08f4cd10
- SHA1
  
  479fc26ec941455d25a596445192a80f0980f187
- SHA256
  
  32e034eb4943579a1dda3ce9c42622ea972861ca81637f951470584b257f71b5
- SHA512
  
  f8c9b5e332e7e915b72ba65b2eb07ed104bf17da221a91cbe21d0fde986b4d3dbf303afd71b09698af99381cdcfacb750270e529dd8a7c03e719738e95956a8f
- SSDEEP
  
  6144:fZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5:xquCuygMQjd5vJIBP1
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2