da430d3347463fca43d7aeb2cde1e3153b69a008153c75c68c21fa158417b744 | Triage™

Login
Reports

Overview

overview

Static

static

3

b1419fe1c7...cs.exe

windows7-x64

b1419fe1c7...cs.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
b1419fe1c76ea2f18c42fb7d2f912340_NeikiAnalytics
Size 73KB
Sample240513-l6v3eahf5t
SHA256 da430d3347463fca43d7aeb2cde1e3153b69a008153c75c68c21fa158417b744
MD5 b1419fe1c76ea2f18c42fb7d2f912340
SHA1 4e292439a8fed33aced646dffbfae0aac26e43ce
SHA512 6bd554f4764ba6ba1c503598448e739cd4105ea60f61b4c8867fd11e518d139e61add019c07a7f8e226a470becc0946ebe60b2a09b9696abbb138c05581e8116
SSDEEP 768:x/nGhX+OZMUpVzJKsMIWqH3N7GLCMa7kmewpUn/LwSUBPkvgjzkQyTDbAFd2Pm5O:xYX+EMU/zobY39qoowSUBPkzQyzAsGIn
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

evasion persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b1419fe1c76ea2f18c42fb7d2f912340_NeikiAnalytics.exe

Resource

win7-20240508-en

windows7-x64

11 signatures

150 seconds

evasion persistence trojan

Behavioral task

behavioral2

Sample

b1419fe1c76ea2f18c42fb7d2f912340_NeikiAnalytics.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

10 signatures

150 seconds

evasion persistence trojan

Malware Config

Targets

- Target
  b1419fe1c76ea2f18c42fb7d2f912340_NeikiAnalytics
- Size 73KB
- SHA256 da430d3347463fca43d7aeb2cde1e3153b69a008153c75c68c21fa158417b744
- MD5 b1419fe1c76ea2f18c42fb7d2f912340
- SHA1 4e292439a8fed33aced646dffbfae0aac26e43ce
- SHA512 6bd554f4764ba6ba1c503598448e739cd4105ea60f61b4c8867fd11e518d139e61add019c07a7f8e226a470becc0946ebe60b2a09b9696abbb138c05581e8116
- SSDEEP 768:x/nGhX+OZMUpVzJKsMIWqH3N7GLCMa7kmewpUn/LwSUBPkvgjzkQyTDbAFd2Pm5O:xYX+EMU/zobY39qoowSUBPkzQyzAsGIn
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan

© 2018-2026

Terms | Privacy