61c23e3b6304bd841f4df36d8eb8b272ac71b20e530bf192e3ed6e48e35fc7f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c1b9530ff1828bb609910f8ac6ec200_NeikiAnalytics
Size

71KB
Sample

240510-y6dvcafh3t
MD5

6c1b9530ff1828bb609910f8ac6ec200
SHA1

6ddd2c56967bac83e8ecf79c127300dbc0569590
SHA256

61c23e3b6304bd841f4df36d8eb8b272ac71b20e530bf192e3ed6e48e35fc7f4
SHA512

80dbc458ff988a551bd89b01efda0a441e88645bba50e8d579fdd7f6d90e1809afed5370e1c0eb52a8bc3e2824f679425fe93e91ad49c4d3c48e1d537f0ef05b
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slS:Olg35GTslA5t3/w8D

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  6c1b9530ff1828bb609910f8ac6ec200_NeikiAnalytics
- Size
  
  71KB
- MD5
  
  6c1b9530ff1828bb609910f8ac6ec200
- SHA1
  
  6ddd2c56967bac83e8ecf79c127300dbc0569590
- SHA256
  
  61c23e3b6304bd841f4df36d8eb8b272ac71b20e530bf192e3ed6e48e35fc7f4
- SHA512
  
  80dbc458ff988a551bd89b01efda0a441e88645bba50e8d579fdd7f6d90e1809afed5370e1c0eb52a8bc3e2824f679425fe93e91ad49c4d3c48e1d537f0ef05b
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slS:Olg35GTslA5t3/w8D
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan