4e2a3160faec418ffb19e7b0217b2eb9454b655ece1627141224b9b0d5a0449f | Triage

Sharing

General

Target

dcf7bcf94b5c931d5b3d7ed53c200760_NeikiAnalytics
Size

138KB
Sample

240516-nrdwpaae8t
MD5

dcf7bcf94b5c931d5b3d7ed53c200760
SHA1

7d889be875b9158dee4ed2c8d9bed09014683a20
SHA256

4e2a3160faec418ffb19e7b0217b2eb9454b655ece1627141224b9b0d5a0449f
SHA512

9d20f05dbe32e8360cad375d5c8f374244f264a1bb38de5c387b7c3c7a5052d6ce104548a2a4eef20d6ba3ca661a7783157c27de07149e955355e35af7de2cde
SSDEEP

3072:BVMfMIbIow3J9tCII06DZWYIYpx+BC3K5eqU+BC3K5eqYroGSc:cfMminCII06VWwpbK70K7zc

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  dcf7bcf94b5c931d5b3d7ed53c200760_NeikiAnalytics
- Size
  
  138KB
- MD5
  
  dcf7bcf94b5c931d5b3d7ed53c200760
- SHA1
  
  7d889be875b9158dee4ed2c8d9bed09014683a20
- SHA256
  
  4e2a3160faec418ffb19e7b0217b2eb9454b655ece1627141224b9b0d5a0449f
- SHA512
  
  9d20f05dbe32e8360cad375d5c8f374244f264a1bb38de5c387b7c3c7a5052d6ce104548a2a4eef20d6ba3ca661a7783157c27de07149e955355e35af7de2cde
- SSDEEP
  
  3072:BVMfMIbIow3J9tCII06DZWYIYpx+BC3K5eqU+BC3K5eqYroGSc:cfMminCII06VWwpbK70K7zc
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2