8247677a550d1561e6830f8004ee776c738f793fe2bbd55782499cc851fb3478 | Triage

Sharing

General

Target

d05b7796bedb8a1668a761a76c542b60_NeikiAnalytics
Size

238KB
Sample

240509-xvq5vsad5v
MD5

d05b7796bedb8a1668a761a76c542b60
SHA1

15033925a8ab3f0d2f49315b2b43063176b7f7a4
SHA256

8247677a550d1561e6830f8004ee776c738f793fe2bbd55782499cc851fb3478
SHA512

e3b0b24adeb196457956427b3b9ef83ae11cad12c6b327101fc047628fc29cd14aa5f8dc2d95644d0a61a456816a21fc24ae211bc497980439f9f636fe62cfa0
SSDEEP

3072:vHYFic67OtWzYo5TTr6v+NPHpBz1LZxJDVbc1N+RnayPyUYGzWg:vH1LitMYo5TTrK6vphTnp2+RnDPynGz1

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  d05b7796bedb8a1668a761a76c542b60_NeikiAnalytics
- Size
  
  238KB
- MD5
  
  d05b7796bedb8a1668a761a76c542b60
- SHA1
  
  15033925a8ab3f0d2f49315b2b43063176b7f7a4
- SHA256
  
  8247677a550d1561e6830f8004ee776c738f793fe2bbd55782499cc851fb3478
- SHA512
  
  e3b0b24adeb196457956427b3b9ef83ae11cad12c6b327101fc047628fc29cd14aa5f8dc2d95644d0a61a456816a21fc24ae211bc497980439f9f636fe62cfa0
- SSDEEP
  
  3072:vHYFic67OtWzYo5TTr6v+NPHpBz1LZxJDVbc1N+RnayPyUYGzWg:vH1LitMYo5TTrK6vphTnp2+RnDPynGz1
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2