96a0d37be9715ecd2a663b51c88697b2bed0af8a6726057a67badc65ffa48dd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e57e08a601b60d51353ad78f5d18800_NeikiAnalytics
Size

73KB
Sample

240514-y4ezmaee8y
MD5

1e57e08a601b60d51353ad78f5d18800
SHA1

e165d789b94e00eb8f5e7ac99865cc21531a9731
SHA256

96a0d37be9715ecd2a663b51c88697b2bed0af8a6726057a67badc65ffa48dd2
SHA512

3ebede8621422733e177fb749ce764e107684a2296c855abf6224187293abf739577eb5842c57b2e80ce8e13412eadd31c831b74e0da86c853ec0f318aa54c5c
SSDEEP

1536:xesVVg0uuuZqcFMMknvALxibD5cZHTSt1h9N/vEW:pm0+ZqcFsvLXSm9N/sW

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  1e57e08a601b60d51353ad78f5d18800_NeikiAnalytics
- Size
  
  73KB
- MD5
  
  1e57e08a601b60d51353ad78f5d18800
- SHA1
  
  e165d789b94e00eb8f5e7ac99865cc21531a9731
- SHA256
  
  96a0d37be9715ecd2a663b51c88697b2bed0af8a6726057a67badc65ffa48dd2
- SHA512
  
  3ebede8621422733e177fb749ce764e107684a2296c855abf6224187293abf739577eb5842c57b2e80ce8e13412eadd31c831b74e0da86c853ec0f318aa54c5c
- SSDEEP
  
  1536:xesVVg0uuuZqcFMMknvALxibD5cZHTSt1h9N/vEW:pm0+ZqcFsvLXSm9N/sW
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan