0246798c2e0fa599236d0ab86f862e2cf994e88c08a14979e94acb82c7539b72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d4ef5cb0823adbcd4034f5d89211a00_NeikiAnalytics
Size

72KB
Sample

240511-gl2x1aha6z
MD5

8d4ef5cb0823adbcd4034f5d89211a00
SHA1

4585ed92da52c9b7758777cdd6f229896f42178a
SHA256

0246798c2e0fa599236d0ab86f862e2cf994e88c08a14979e94acb82c7539b72
SHA512

9565b22ad5022cac917d676536aa56478f2b8f04284b6abbbd912f019ddd8defffeda670428adc935a11fcc8041009eb765f3c4e33d92344185a438f81fc42fe
SSDEEP

1536:xAyToPledgGkAlSt9yzkwUk6Nr5kEHIwA6DAW:3hgRAlStYzkrJNFkEH9Dz

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8d4ef5cb0823adbcd4034f5d89211a00_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  8d4ef5cb0823adbcd4034f5d89211a00
- SHA1
  
  4585ed92da52c9b7758777cdd6f229896f42178a
- SHA256
  
  0246798c2e0fa599236d0ab86f862e2cf994e88c08a14979e94acb82c7539b72
- SHA512
  
  9565b22ad5022cac917d676536aa56478f2b8f04284b6abbbd912f019ddd8defffeda670428adc935a11fcc8041009eb765f3c4e33d92344185a438f81fc42fe
- SSDEEP
  
  1536:xAyToPledgGkAlSt9yzkwUk6Nr5kEHIwA6DAW:3hgRAlStYzkrJNFkEH9Dz
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan