06fa71b51e1e78dcb852cd031ac8e2650af0f5c69460223e35cf3ebdf0a24d4f | Triage

Sharing

General

Target

d8038817cbcb9b02b78c9a9c8a340df0_NeikiAnalytics
Size

135KB
Sample

240516-lrgw8sef7w
MD5

d8038817cbcb9b02b78c9a9c8a340df0
SHA1

3f15eacf256fb9487a4c29d761af0e0d605398bc
SHA256

06fa71b51e1e78dcb852cd031ac8e2650af0f5c69460223e35cf3ebdf0a24d4f
SHA512

1c96cd3ab801ae3b9ab43580394496bc63cd0d1cde2b8f92ba3c76d1b3320ee0e8cf8e8f1706f338cf38f5ff0a9d656961f5498cc87e57a17835c0f5885e79a9
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVCa:UVqoCl/YgjxEufVU0TbTyDDalQa

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  d8038817cbcb9b02b78c9a9c8a340df0_NeikiAnalytics
- Size
  
  135KB
- MD5
  
  d8038817cbcb9b02b78c9a9c8a340df0
- SHA1
  
  3f15eacf256fb9487a4c29d761af0e0d605398bc
- SHA256
  
  06fa71b51e1e78dcb852cd031ac8e2650af0f5c69460223e35cf3ebdf0a24d4f
- SHA512
  
  1c96cd3ab801ae3b9ab43580394496bc63cd0d1cde2b8f92ba3c76d1b3320ee0e8cf8e8f1706f338cf38f5ff0a9d656961f5498cc87e57a17835c0f5885e79a9
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVCa:UVqoCl/YgjxEufVU0TbTyDDalQa
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence