ac7bca728394504a5d751f4151ddc9f33f4fe4ad1982dbb06130732e6da45aa1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b3dbd79a388eed8381737eedcfed060_NeikiAnalytics
Size

70KB
Sample

240513-zz242adh2z
MD5

1b3dbd79a388eed8381737eedcfed060
SHA1

007dc896a69b296a46aa20286843e351033a14e4
SHA256

ac7bca728394504a5d751f4151ddc9f33f4fe4ad1982dbb06130732e6da45aa1
SHA512

72c48438c5765316c77c82a49ca513bdb4aa86bd8a27ff34f1a929c8f2913a83f841494250d3cf50969376fc50b6e8eac704702498beacb1560ed4efb44f79b6
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slj:Olg35GTslA5t3/w8A

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  1b3dbd79a388eed8381737eedcfed060_NeikiAnalytics
- Size
  
  70KB
- MD5
  
  1b3dbd79a388eed8381737eedcfed060
- SHA1
  
  007dc896a69b296a46aa20286843e351033a14e4
- SHA256
  
  ac7bca728394504a5d751f4151ddc9f33f4fe4ad1982dbb06130732e6da45aa1
- SHA512
  
  72c48438c5765316c77c82a49ca513bdb4aa86bd8a27ff34f1a929c8f2913a83f841494250d3cf50969376fc50b6e8eac704702498beacb1560ed4efb44f79b6
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slj:Olg35GTslA5t3/w8A
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan