b41dd8c002e54a9db0df2c82a4478fafe5b4f9a6433e7da6ebe46f00ed60bd11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c76bc646ceb12ea0d7b22affd3c7120_NeikiAnalytics
Size

73KB
Sample

240516-cmkmwsfh6v
MD5

7c76bc646ceb12ea0d7b22affd3c7120
SHA1

cfa9385f99e0a9e2ef3b620004b98957662b32a0
SHA256

b41dd8c002e54a9db0df2c82a4478fafe5b4f9a6433e7da6ebe46f00ed60bd11
SHA512

d45cf5427974b0e9641951fdbc371841a6319a378f6294627cc91ea6e1b0436d0d7ff628c4da1bd57ae843262ef18314db9c8bd89e2ca9760de9cc5ac69c2c73
SSDEEP

1536:xuZG3rqYGOJXGF6RlbOUWc7dFKJbeKHzl+v8KHD5oeJmqabqBK:4ZGbqGIeKHzQ8KHVoqmqaSK

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  7c76bc646ceb12ea0d7b22affd3c7120_NeikiAnalytics
- Size
  
  73KB
- MD5
  
  7c76bc646ceb12ea0d7b22affd3c7120
- SHA1
  
  cfa9385f99e0a9e2ef3b620004b98957662b32a0
- SHA256
  
  b41dd8c002e54a9db0df2c82a4478fafe5b4f9a6433e7da6ebe46f00ed60bd11
- SHA512
  
  d45cf5427974b0e9641951fdbc371841a6319a378f6294627cc91ea6e1b0436d0d7ff628c4da1bd57ae843262ef18314db9c8bd89e2ca9760de9cc5ac69c2c73
- SSDEEP
  
  1536:xuZG3rqYGOJXGF6RlbOUWc7dFKJbeKHzl+v8KHD5oeJmqabqBK:4ZGbqGIeKHzQ8KHVoqmqaSK
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan