84643fee9003330b9e56ec72090f1ac3b53404277eca48a2796daa6bcfd1a8a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7318a62cddeb5e5ead53aabf818c5530_NeikiAnalytics
Size

656KB
Sample

240509-svlg6agg9y
MD5

7318a62cddeb5e5ead53aabf818c5530
SHA1

ce2664c64f2c32377607595839b3eefe16291001
SHA256

84643fee9003330b9e56ec72090f1ac3b53404277eca48a2796daa6bcfd1a8a5
SHA512

9a1963a5b0b52b51cd270be97d9ef2fdb09a41717a7fa51fdb22525fa864f0fc6fd5e40a26c2abb6667a7f02b17c2597ea37f97839c1cb2af49673eeeb4ed07d
SSDEEP

12288:PFUNDa0rMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUx9VP:PFOamZyCA8CBmn+RrNj9ay5IP

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  7318a62cddeb5e5ead53aabf818c5530_NeikiAnalytics
- Size
  
  656KB
- MD5
  
  7318a62cddeb5e5ead53aabf818c5530
- SHA1
  
  ce2664c64f2c32377607595839b3eefe16291001
- SHA256
  
  84643fee9003330b9e56ec72090f1ac3b53404277eca48a2796daa6bcfd1a8a5
- SHA512
  
  9a1963a5b0b52b51cd270be97d9ef2fdb09a41717a7fa51fdb22525fa864f0fc6fd5e40a26c2abb6667a7f02b17c2597ea37f97839c1cb2af49673eeeb4ed07d
- SSDEEP
  
  12288:PFUNDa0rMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUx9VP:PFOamZyCA8CBmn+RrNj9ay5IP
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence