4f7d81c669e35e1c12005016f8a0067758818a41f93f9167afeb2d1e99ba31f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6420533631e7e98d14140269c9d28920_NeikiAnalytics
Size

2.0MB
Sample

240510-egcffacf77
MD5

6420533631e7e98d14140269c9d28920
SHA1

d9b5fef039545f5b97f59383cedef69380a3dff5
SHA256

4f7d81c669e35e1c12005016f8a0067758818a41f93f9167afeb2d1e99ba31f0
SHA512

688b3bc4aadcd6b85793bd219714285377b0e5d6f3783b11a4d08d28656e0001aebae074b50b0b59f83ca6dc6634a1bb4e33a2d961b065d1b6f22d0e19d44dc2
SSDEEP

49152:rcl6dwq1aRgigZ6W5LXP63KNUR9IETjALJr87gigh:glq1ZXy3M

Score

7^/10

Malware Config

Targets

- Target
  
  6420533631e7e98d14140269c9d28920_NeikiAnalytics
- Size
  
  2.0MB
- MD5
  
  6420533631e7e98d14140269c9d28920
- SHA1
  
  d9b5fef039545f5b97f59383cedef69380a3dff5
- SHA256
  
  4f7d81c669e35e1c12005016f8a0067758818a41f93f9167afeb2d1e99ba31f0
- SHA512
  
  688b3bc4aadcd6b85793bd219714285377b0e5d6f3783b11a4d08d28656e0001aebae074b50b0b59f83ca6dc6634a1bb4e33a2d961b065d1b6f22d0e19d44dc2
- SSDEEP
  
  49152:rcl6dwq1aRgigZ6W5LXP63KNUR9IETjALJr87gigh:glq1ZXy3M
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2