ae10565e92e4dd299a214581eb85a9a7a6c9d09f536fb9c3e5cdb1db3dfbffc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0faed45fe8b7e883694e936dd69d9e0_NeikiAnalytics
Size

70KB
Sample

240509-w5swrsbe65
MD5

c0faed45fe8b7e883694e936dd69d9e0
SHA1

f25ed3510378cbba488c3bb51ab82be5609574c7
SHA256

ae10565e92e4dd299a214581eb85a9a7a6c9d09f536fb9c3e5cdb1db3dfbffc3
SHA512

9210931c78de11ac3cc0760f8a1d1e7f5d57706bd66a1d2d1d4b9422939b8d9d16fa8a451a02503fd2417433ed6bd0c7e63f6c1cafd079fa3404b4c740d03a1b
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8ds:Olg35GTslA5t3/w8i

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  c0faed45fe8b7e883694e936dd69d9e0_NeikiAnalytics
- Size
  
  70KB
- MD5
  
  c0faed45fe8b7e883694e936dd69d9e0
- SHA1
  
  f25ed3510378cbba488c3bb51ab82be5609574c7
- SHA256
  
  ae10565e92e4dd299a214581eb85a9a7a6c9d09f536fb9c3e5cdb1db3dfbffc3
- SHA512
  
  9210931c78de11ac3cc0760f8a1d1e7f5d57706bd66a1d2d1d4b9422939b8d9d16fa8a451a02503fd2417433ed6bd0c7e63f6c1cafd079fa3404b4c740d03a1b
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8ds:Olg35GTslA5t3/w8i
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan