c5653315f20dc77ecc8da3c3e41f1d7a0ce31dd581cc82b74bef27b508ac4128 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a3e16da29ee4e5d8593edf7fc447bd0_NeikiAnalytics
Size

70KB
Sample

240515-bxcjlaba62
MD5

5a3e16da29ee4e5d8593edf7fc447bd0
SHA1

370c06303e1665b9fb9b2a694289fb956c801db4
SHA256

c5653315f20dc77ecc8da3c3e41f1d7a0ce31dd581cc82b74bef27b508ac4128
SHA512

40d16dcd51055b6a9fe27dc3b9fc9a971388a4b57a9f96c538b0d892a67f5ed4cc282b6a0495f8ca79c76117ef31f6f3f80bb641d8d7883225a0c347cee35f61
SSDEEP

1536:xnQYxd5ngUaB4tcVsfDGwZSk3QDTcFMxTGigP+LN3P78XsGyelTf49/:f1EvMCTyI/ksGySz41

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5a3e16da29ee4e5d8593edf7fc447bd0_NeikiAnalytics
- Size
  
  70KB
- MD5
  
  5a3e16da29ee4e5d8593edf7fc447bd0
- SHA1
  
  370c06303e1665b9fb9b2a694289fb956c801db4
- SHA256
  
  c5653315f20dc77ecc8da3c3e41f1d7a0ce31dd581cc82b74bef27b508ac4128
- SHA512
  
  40d16dcd51055b6a9fe27dc3b9fc9a971388a4b57a9f96c538b0d892a67f5ed4cc282b6a0495f8ca79c76117ef31f6f3f80bb641d8d7883225a0c347cee35f61
- SSDEEP
  
  1536:xnQYxd5ngUaB4tcVsfDGwZSk3QDTcFMxTGigP+LN3P78XsGyelTf49/:f1EvMCTyI/ksGySz41
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan