General
-
Target
5c3bfe6c3a056d11d50f6d8c61b37c60_NeikiAnalytics.exe
-
Size
97KB
-
Sample
240516-3tx5nsfa9y
-
MD5
5c3bfe6c3a056d11d50f6d8c61b37c60
-
SHA1
246539fce892a54568d7a73866e83ee81a044eaf
-
SHA256
dbce160cdb9c307fa1b54b19f6535aab7b07aae47624227f44271a53cfc021e9
-
SHA512
d3c58f57d81c7e50089599c96977354bd74bea58a83f6011383687d9fdc2c9b8ef7b6ac0504c496b0072185b461d9da0dc291cc547d2eca70f541069295745b9
-
SSDEEP
1536:QxUBquShDQU5utdPIMaVfvlZ6dyB4YJtz+/3s:QxUBHS1hOdPIjNZik3
Static task
static1
Behavioral task
behavioral1
Sample
5c3bfe6c3a056d11d50f6d8c61b37c60_NeikiAnalytics.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
5c3bfe6c3a056d11d50f6d8c61b37c60_NeikiAnalytics.exe
-
Size
97KB
-
MD5
5c3bfe6c3a056d11d50f6d8c61b37c60
-
SHA1
246539fce892a54568d7a73866e83ee81a044eaf
-
SHA256
dbce160cdb9c307fa1b54b19f6535aab7b07aae47624227f44271a53cfc021e9
-
SHA512
d3c58f57d81c7e50089599c96977354bd74bea58a83f6011383687d9fdc2c9b8ef7b6ac0504c496b0072185b461d9da0dc291cc547d2eca70f541069295745b9
-
SSDEEP
1536:QxUBquShDQU5utdPIMaVfvlZ6dyB4YJtz+/3s:QxUBHS1hOdPIjNZik3
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
5Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3