86324175f1aa0b977cd64ebd4962a09d570e0ae93e76c8f50d37d1239964e357 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

170de3f775e1503c9970104b1a56b810_NeikiAnalytics
Size

72KB
Sample

240513-zmvt7adg85
MD5

170de3f775e1503c9970104b1a56b810
SHA1

6610d1f9c0088a5d053abfb297bc549c7bbad7db
SHA256

86324175f1aa0b977cd64ebd4962a09d570e0ae93e76c8f50d37d1239964e357
SHA512

6ea567e9be552944b7fec04c4aad51c70b0a6ef49f16459ceee4800ed4c4a6dc3bf4791c62334d209253a66afb5074815640a750471b772e65288d5cfb513d32
SSDEEP

768:x/nGhX+OZMUpVzJKsMIWqH3N7GLCMa7kmewpUn/LwSUBPkvgjzkQyTDbAFd2Pm5v:xYX+EMU/zobY39qoowSUBPkzQyzAsGd

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  170de3f775e1503c9970104b1a56b810_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  170de3f775e1503c9970104b1a56b810
- SHA1
  
  6610d1f9c0088a5d053abfb297bc549c7bbad7db
- SHA256
  
  86324175f1aa0b977cd64ebd4962a09d570e0ae93e76c8f50d37d1239964e357
- SHA512
  
  6ea567e9be552944b7fec04c4aad51c70b0a6ef49f16459ceee4800ed4c4a6dc3bf4791c62334d209253a66afb5074815640a750471b772e65288d5cfb513d32
- SSDEEP
  
  768:x/nGhX+OZMUpVzJKsMIWqH3N7GLCMa7kmewpUn/LwSUBPkvgjzkQyTDbAFd2Pm5v:xYX+EMU/zobY39qoowSUBPkzQyzAsGd
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan