f71be93d9074b7d9f408af1e4a734b6bdcf92b25d7eb74a59f1648fa79c9843d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b86e20a3b9c8e6dd4b946b064985eb0_NeikiAnalytics
Size

70KB
Sample

240513-yj8ffabe4z
MD5

0b86e20a3b9c8e6dd4b946b064985eb0
SHA1

0cc36162ef74bc7eb7418b8b15402e3927a62d7f
SHA256

f71be93d9074b7d9f408af1e4a734b6bdcf92b25d7eb74a59f1648fa79c9843d
SHA512

460ef38b6737af6db6f9af20d8057c5b1918bf11e8d74283f7af010a70a48e4430e03dbe108dffa3c75b1a5c55d4904690636df02e9171fb0a0840ab39f4f3c8
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slb:Olg35GTslA5t3/w8i

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0b86e20a3b9c8e6dd4b946b064985eb0_NeikiAnalytics
- Size
  
  70KB
- MD5
  
  0b86e20a3b9c8e6dd4b946b064985eb0
- SHA1
  
  0cc36162ef74bc7eb7418b8b15402e3927a62d7f
- SHA256
  
  f71be93d9074b7d9f408af1e4a734b6bdcf92b25d7eb74a59f1648fa79c9843d
- SHA512
  
  460ef38b6737af6db6f9af20d8057c5b1918bf11e8d74283f7af010a70a48e4430e03dbe108dffa3c75b1a5c55d4904690636df02e9171fb0a0840ab39f4f3c8
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slb:Olg35GTslA5t3/w8i
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan