b514f8b039ac6e825c853f2d41ccfc665207b717fdc75337b86b2732706d3641 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38d64b4907fc74a6ffdd6b9579bd0480_NeikiAnalytics
Size

70KB
Sample

240510-whj1cahg8z
MD5

38d64b4907fc74a6ffdd6b9579bd0480
SHA1

ac03383fd0e749b37dbe9197f8ae8effa0575a9b
SHA256

b514f8b039ac6e825c853f2d41ccfc665207b717fdc75337b86b2732706d3641
SHA512

87ad41c5f5b8b8a5d8fb928d506ba4496840ac1638844f58bc5829235d1c861c114376e76ac840592f248e613a4afaecff3dc45254973630647de8de73da07c9
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Wa:Olg35GTslA5t3/w8Wa

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  38d64b4907fc74a6ffdd6b9579bd0480_NeikiAnalytics
- Size
  
  70KB
- MD5
  
  38d64b4907fc74a6ffdd6b9579bd0480
- SHA1
  
  ac03383fd0e749b37dbe9197f8ae8effa0575a9b
- SHA256
  
  b514f8b039ac6e825c853f2d41ccfc665207b717fdc75337b86b2732706d3641
- SHA512
  
  87ad41c5f5b8b8a5d8fb928d506ba4496840ac1638844f58bc5829235d1c861c114376e76ac840592f248e613a4afaecff3dc45254973630647de8de73da07c9
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Wa:Olg35GTslA5t3/w8Wa
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan