c210eba07f356e5b67c81010c5f9a4d09fab358062e5dc96fcd47fe24ca8c972 | Triage

Sharing

General

Target

9ba553bfec8fa5baf731987c80f42290_NeikiAnalytics
Size

73KB
Sample

240514-hsdpeseg84
MD5

9ba553bfec8fa5baf731987c80f42290
SHA1

11fd555fc81918cecb6fea2f1306adbe807e1d95
SHA256

c210eba07f356e5b67c81010c5f9a4d09fab358062e5dc96fcd47fe24ca8c972
SHA512

57b4dd86a6661a50edb06f935eb93c8a49b9ae844777a34683ef13ce43e739908e917de2334bd5e957b1f1bafa257eda1f77451f2158da4e86e9b5d306027a60
SSDEEP

1536:xnQYxd5ngUaB4tcVsfDGwZSk3QDTcFMxTGigP+LN3P78XsGyelTf4JPs:f1EvMCTyI/ksGySz4Bs

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  9ba553bfec8fa5baf731987c80f42290_NeikiAnalytics
- Size
  
  73KB
- MD5
  
  9ba553bfec8fa5baf731987c80f42290
- SHA1
  
  11fd555fc81918cecb6fea2f1306adbe807e1d95
- SHA256
  
  c210eba07f356e5b67c81010c5f9a4d09fab358062e5dc96fcd47fe24ca8c972
- SHA512
  
  57b4dd86a6661a50edb06f935eb93c8a49b9ae844777a34683ef13ce43e739908e917de2334bd5e957b1f1bafa257eda1f77451f2158da4e86e9b5d306027a60
- SSDEEP
  
  1536:xnQYxd5ngUaB4tcVsfDGwZSk3QDTcFMxTGigP+LN3P78XsGyelTf4JPs:f1EvMCTyI/ksGySz4Bs
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan