2ce6ee6f54bf7c024cf41f2dcd6cf9fa7c66650c419eafd0a2b4dc8b90142b2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adebeca06eb26bd6476f87259740aa80_NeikiAnalytics
Size

71KB
Sample

240513-lblv9ahb34
MD5

adebeca06eb26bd6476f87259740aa80
SHA1

7031944d43957c234a7c0f5d7336ef83be3efb8b
SHA256

2ce6ee6f54bf7c024cf41f2dcd6cf9fa7c66650c419eafd0a2b4dc8b90142b2e
SHA512

81a23e9f134e59bf026b9471e203e8cfa0fd5437859c770d2c2985da965b1396860b5cdaf2b4e83775cf2093da223b044a9fe94a7e6fb2dad83fc172c993d4ca
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8JM:Olg35GTslA5t3/w8K

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  adebeca06eb26bd6476f87259740aa80_NeikiAnalytics
- Size
  
  71KB
- MD5
  
  adebeca06eb26bd6476f87259740aa80
- SHA1
  
  7031944d43957c234a7c0f5d7336ef83be3efb8b
- SHA256
  
  2ce6ee6f54bf7c024cf41f2dcd6cf9fa7c66650c419eafd0a2b4dc8b90142b2e
- SHA512
  
  81a23e9f134e59bf026b9471e203e8cfa0fd5437859c770d2c2985da965b1396860b5cdaf2b4e83775cf2093da223b044a9fe94a7e6fb2dad83fc172c993d4ca
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8JM:Olg35GTslA5t3/w8K
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan