1051d2a7fea629033482b4d15525d59f8daf829923ebc19eb15be54c7251da5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47583fd4224f58d99be24a64f451de50_NeikiAnalytics
Size

71KB
Sample

240512-x2ds4scc6s
MD5

47583fd4224f58d99be24a64f451de50
SHA1

3ba14acde29c1d7051eb2c24eb5726b4f68dde67
SHA256

1051d2a7fea629033482b4d15525d59f8daf829923ebc19eb15be54c7251da5a
SHA512

5a8d5deb09857f312d45587e61c456159444197c6a6793beaefd1c34a82732dfdb23b36b88a2209d8d10b0bfab0432a46450fe66b6a70fb2ad4c54016fa8a47f
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slUvKy:Olg35GTslA5t3/w8fvKy

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  47583fd4224f58d99be24a64f451de50_NeikiAnalytics
- Size
  
  71KB
- MD5
  
  47583fd4224f58d99be24a64f451de50
- SHA1
  
  3ba14acde29c1d7051eb2c24eb5726b4f68dde67
- SHA256
  
  1051d2a7fea629033482b4d15525d59f8daf829923ebc19eb15be54c7251da5a
- SHA512
  
  5a8d5deb09857f312d45587e61c456159444197c6a6793beaefd1c34a82732dfdb23b36b88a2209d8d10b0bfab0432a46450fe66b6a70fb2ad4c54016fa8a47f
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slUvKy:Olg35GTslA5t3/w8fvKy
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan