ff526da0ef862d37ae09dfb122d230baf5433c437226f5381ec392ab8051e718 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fa1c3c8b35ff2c2fff2a6b1872a09e0_NeikiAnalytics
Size

73KB
Sample

240515-gkclqacb74
MD5

8fa1c3c8b35ff2c2fff2a6b1872a09e0
SHA1

c1f9d01b8b31e71961e451308be0bbbb5b37260c
SHA256

ff526da0ef862d37ae09dfb122d230baf5433c437226f5381ec392ab8051e718
SHA512

9371733cbd3d82f340bf65dee7926d37bd9cdffa2a38716ca7a03eb81752476d03972083892128a9ad67956cd1c922cc1865f67af8d5ea4c2db1443a4888e8fe
SSDEEP

1536:x3jgs+6phKAQx5c895P5Zxuyowea2eJYIuv1iahWuSxaqMXSm6:BTdphKRxR95P5Zhowea2yuv/hWuSxa98

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8fa1c3c8b35ff2c2fff2a6b1872a09e0_NeikiAnalytics
- Size
  
  73KB
- MD5
  
  8fa1c3c8b35ff2c2fff2a6b1872a09e0
- SHA1
  
  c1f9d01b8b31e71961e451308be0bbbb5b37260c
- SHA256
  
  ff526da0ef862d37ae09dfb122d230baf5433c437226f5381ec392ab8051e718
- SHA512
  
  9371733cbd3d82f340bf65dee7926d37bd9cdffa2a38716ca7a03eb81752476d03972083892128a9ad67956cd1c922cc1865f67af8d5ea4c2db1443a4888e8fe
- SSDEEP
  
  1536:x3jgs+6phKAQx5c895P5Zxuyowea2eJYIuv1iahWuSxaqMXSm6:BTdphKRxR95P5Zhowea2yuv/hWuSxa98
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan