a43c7a765fb0d5223f707a71af54f0039441ec562a92b40653280369b70ce880 | Triage™

Login
Reports

Overview

overview

Static

static

3

99b2cdf1ef...cs.exe

windows7-x64

99b2cdf1ef...cs.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
99b2cdf1efb129bb5f71c26417d93670_NeikiAnalytics
Size 70KB
Sample240514-hm497aef45
SHA256 a43c7a765fb0d5223f707a71af54f0039441ec562a92b40653280369b70ce880
MD5 99b2cdf1efb129bb5f71c26417d93670
SHA1 b7cee1e41c3ade35187b29a7870c396e5968dd9b
SHA512 87463034a0d1c16c544e64ae44e79e59a38d5f6b8ebb25c76554b0415e3ccc691c957cb8441d5f46a6d85983c6008e21ae71ebc855efa0fec8f8ac29f4562558
SSDEEP 1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8E7:Olg35GTslA5t3/w8E7
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

evasion persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

99b2cdf1efb129bb5f71c26417d93670_NeikiAnalytics.exe

Resource

win7-20240419-en

windows7-x64

11 signatures

150 seconds

evasion persistence trojan

Behavioral task

behavioral2

Sample

99b2cdf1efb129bb5f71c26417d93670_NeikiAnalytics.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

10 signatures

150 seconds

evasion persistence trojan

Malware Config

Targets

- Target
  99b2cdf1efb129bb5f71c26417d93670_NeikiAnalytics
- Size 70KB
- SHA256 a43c7a765fb0d5223f707a71af54f0039441ec562a92b40653280369b70ce880
- MD5 99b2cdf1efb129bb5f71c26417d93670
- SHA1 b7cee1e41c3ade35187b29a7870c396e5968dd9b
- SHA512 87463034a0d1c16c544e64ae44e79e59a38d5f6b8ebb25c76554b0415e3ccc691c957cb8441d5f46a6d85983c6008e21ae71ebc855efa0fec8f8ac29f4562558
- SSDEEP 1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8E7:Olg35GTslA5t3/w8E7
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan

© 2018-2026

Terms | Privacy