8490d138476f26fd4344b83b1d5f157b1673f1590d04770e8f5cd847a4b3a287 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10dc3727a0209c13a3dde0c4e86573c0_NeikiAnalytics
Size

70KB
Sample

240512-p6mb2sff71
MD5

10dc3727a0209c13a3dde0c4e86573c0
SHA1

59ffef193354a3ab3b7070e60ddb58e9e76f0df3
SHA256

8490d138476f26fd4344b83b1d5f157b1673f1590d04770e8f5cd847a4b3a287
SHA512

edf52b61e34f723217a39d2b40d44a7e6e5b07a2bd9b9b57d87efb243468715349d0feced6e43f801458059a560ef99a44afbf2d3a5169ad43caa8804f6037c1
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8w:Olg35GTslA5t3/w8w

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  10dc3727a0209c13a3dde0c4e86573c0_NeikiAnalytics
- Size
  
  70KB
- MD5
  
  10dc3727a0209c13a3dde0c4e86573c0
- SHA1
  
  59ffef193354a3ab3b7070e60ddb58e9e76f0df3
- SHA256
  
  8490d138476f26fd4344b83b1d5f157b1673f1590d04770e8f5cd847a4b3a287
- SHA512
  
  edf52b61e34f723217a39d2b40d44a7e6e5b07a2bd9b9b57d87efb243468715349d0feced6e43f801458059a560ef99a44afbf2d3a5169ad43caa8804f6037c1
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8w:Olg35GTslA5t3/w8w
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan