ac1e856b5338aedc8c8e23b1726ba2c31e7971b3aa1931ae55c95c9c1c1a1a05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6231a769c9f0e1708ca758253b80ae50_NeikiAnalytics
Size

70KB
Sample

240512-drl7ysdg8v
MD5

6231a769c9f0e1708ca758253b80ae50
SHA1

fca45c674a1c366cea71a7ae211363a7729f575b
SHA256

ac1e856b5338aedc8c8e23b1726ba2c31e7971b3aa1931ae55c95c9c1c1a1a05
SHA512

a6582d62234cb562c120b14ee1fc939d04016d2c3aecd730d07d093edb38b5f30d0acd700a64a063bf8fad79af3b8fc3907206ca66080748e2692dfd08b70089
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8FgO:Olg35GTslA5t3/w85

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  6231a769c9f0e1708ca758253b80ae50_NeikiAnalytics
- Size
  
  70KB
- MD5
  
  6231a769c9f0e1708ca758253b80ae50
- SHA1
  
  fca45c674a1c366cea71a7ae211363a7729f575b
- SHA256
  
  ac1e856b5338aedc8c8e23b1726ba2c31e7971b3aa1931ae55c95c9c1c1a1a05
- SHA512
  
  a6582d62234cb562c120b14ee1fc939d04016d2c3aecd730d07d093edb38b5f30d0acd700a64a063bf8fad79af3b8fc3907206ca66080748e2692dfd08b70089
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8FgO:Olg35GTslA5t3/w85
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan