a4500e64e6faa0b952eca2070744df2218d6d26a63de82aa6b1b90ec6f1e73e1 | Triage

Sharing

General

Target

d308f38622d8c1e1064728d92932d520_NeikiAnalytics
Size

72KB
Sample

240510-nnxvdsbh5y
MD5

d308f38622d8c1e1064728d92932d520
SHA1

31735a46ac470a352d89fc80cd94b46ca53edad6
SHA256

a4500e64e6faa0b952eca2070744df2218d6d26a63de82aa6b1b90ec6f1e73e1
SHA512

2b515d2444c997d0679c6d89bcb776c61cd7482683c804ca2e5044b4efa77126f52d4b2c11a4dc6d169625ad6f8437865d4b8dac3e6c6a9dcff8def3b6994fea
SSDEEP

1536:xyGioEFhlmSUO4tss7GwZyC2LcdtdoqDbAPfMzETC7fYJJgISHgzPZydy:p8VmSB4tss7GwZyC1NZO0zH2gBoZOy

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  d308f38622d8c1e1064728d92932d520_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  d308f38622d8c1e1064728d92932d520
- SHA1
  
  31735a46ac470a352d89fc80cd94b46ca53edad6
- SHA256
  
  a4500e64e6faa0b952eca2070744df2218d6d26a63de82aa6b1b90ec6f1e73e1
- SHA512
  
  2b515d2444c997d0679c6d89bcb776c61cd7482683c804ca2e5044b4efa77126f52d4b2c11a4dc6d169625ad6f8437865d4b8dac3e6c6a9dcff8def3b6994fea
- SSDEEP
  
  1536:xyGioEFhlmSUO4tss7GwZyC2LcdtdoqDbAPfMzETC7fYJJgISHgzPZydy:p8VmSB4tss7GwZyC1NZO0zH2gBoZOy
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan