3ccba361f32bdeb4aa230d88b4487020793b99119c1753d25780eff246adf27a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7aa0b6dcb5998b7d72836590623fd30_NeikiAnalytics
Size

72KB
Sample

240515-sd4meaeh59
MD5

d7aa0b6dcb5998b7d72836590623fd30
SHA1

52891ce8de9fefb78e8ddc12a1a7b2238d0e49b8
SHA256

3ccba361f32bdeb4aa230d88b4487020793b99119c1753d25780eff246adf27a
SHA512

61079e9a2dda5584e3bf7ab466d6af985a3d35af8c084c0bc8fa141a30fe1d2353f6d15db3eec2f420833782a600b22cde356f4e35467dd0b00d6347da6b0e5a
SSDEEP

1536:xl6p585dpr3KCUGCsqq2ku2S+Se0uyMWmiCeiq+uKQy6+2OOSGwm6S+yaG2quiCf:f6XY/3KCUGCsqq2ku2S+Se0uyMWmiCe+

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  d7aa0b6dcb5998b7d72836590623fd30_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  d7aa0b6dcb5998b7d72836590623fd30
- SHA1
  
  52891ce8de9fefb78e8ddc12a1a7b2238d0e49b8
- SHA256
  
  3ccba361f32bdeb4aa230d88b4487020793b99119c1753d25780eff246adf27a
- SHA512
  
  61079e9a2dda5584e3bf7ab466d6af985a3d35af8c084c0bc8fa141a30fe1d2353f6d15db3eec2f420833782a600b22cde356f4e35467dd0b00d6347da6b0e5a
- SSDEEP
  
  1536:xl6p585dpr3KCUGCsqq2ku2S+Se0uyMWmiCeiq+uKQy6+2OOSGwm6S+yaG2quiCf:f6XY/3KCUGCsqq2ku2S+Se0uyMWmiCe+
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan