eb2a1d3bad0577a4271fe366176f9b5e940cdd9d5c550d587deaa5273193f31d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dddad1b8951bd205555caf04866a0e0_NeikiAnalytics
Size

70KB
Sample

240512-w1yapaab4s
MD5

3dddad1b8951bd205555caf04866a0e0
SHA1

ab6abca726d0eb17ecc798824133938ecccf8de4
SHA256

eb2a1d3bad0577a4271fe366176f9b5e940cdd9d5c550d587deaa5273193f31d
SHA512

3f05445e12b1389b3a0c4d46c7f5d0f23ce0b4999d775ed8e8b4bcb285a7da1395522265ac44808673d5d88e8b525ae2b3e0b65e88d8298f28cf29a21851bbe3
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Uw:Olg35GTslA5t3/w8Uw

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  3dddad1b8951bd205555caf04866a0e0_NeikiAnalytics
- Size
  
  70KB
- MD5
  
  3dddad1b8951bd205555caf04866a0e0
- SHA1
  
  ab6abca726d0eb17ecc798824133938ecccf8de4
- SHA256
  
  eb2a1d3bad0577a4271fe366176f9b5e940cdd9d5c550d587deaa5273193f31d
- SHA512
  
  3f05445e12b1389b3a0c4d46c7f5d0f23ce0b4999d775ed8e8b4bcb285a7da1395522265ac44808673d5d88e8b525ae2b3e0b65e88d8298f28cf29a21851bbe3
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Uw:Olg35GTslA5t3/w8Uw
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan