6dce986c15d0baf13803bffbbbf18947b45e02588c50eca30586d40117135126 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab1e8f1fb2a744c1fb90193fe6517e30_NeikiAnalytics
Size

76KB
Sample

240513-kllgssfg66
MD5

ab1e8f1fb2a744c1fb90193fe6517e30
SHA1

cf4d2da4107f393d894b111b4b9c08edd5639a41
SHA256

6dce986c15d0baf13803bffbbbf18947b45e02588c50eca30586d40117135126
SHA512

c47a4befa0beef1952db1b455e7c8a708da3b9ad903538d5654bec8baed9b931579cc43c4245d8e5a94dfce5e351e646ada237d0c489e7c0d2124e1dc590ee51
SSDEEP

1536:Mm6a9iexVfevarojyHDmJ6K61B5pi4pX7A:MC9/jf6auyHDYwB5pL8

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  ab1e8f1fb2a744c1fb90193fe6517e30_NeikiAnalytics
- Size
  
  76KB
- MD5
  
  ab1e8f1fb2a744c1fb90193fe6517e30
- SHA1
  
  cf4d2da4107f393d894b111b4b9c08edd5639a41
- SHA256
  
  6dce986c15d0baf13803bffbbbf18947b45e02588c50eca30586d40117135126
- SHA512
  
  c47a4befa0beef1952db1b455e7c8a708da3b9ad903538d5654bec8baed9b931579cc43c4245d8e5a94dfce5e351e646ada237d0c489e7c0d2124e1dc590ee51
- SSDEEP
  
  1536:Mm6a9iexVfevarojyHDmJ6K61B5pi4pX7A:MC9/jf6auyHDYwB5pL8
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2