General
-
Target
0aaabf472516fbf80afe0afac2436770_NeikiAnalytics.exe
-
Size
65KB
-
Sample
240516-wvwvnshe33
-
MD5
0aaabf472516fbf80afe0afac2436770
-
SHA1
ce06489e94925cb56a3b6a959e3ef39f30581d9a
-
SHA256
3389a549fc8673b1c940cf339408d4d0491983eac0c6542f5e3e42fc7bb56efc
-
SHA512
4a9abdf23419bfd5cd907d8f242aaeed84a102265c4b59dfe395d4c8659b702fb2589e8eb573d1fd45e6324b718113d6560331b27697d5321bbd790cf4cec64d
-
SSDEEP
1536:NfWuU+ktZ1l0Tu5lKiOZflVtTixnVNh8TmzPmUw+D1Y/6xhOM:tW/13STuvZOZfxm4TGPmUw+D+/Mhz
Static task
static1
Behavioral task
behavioral1
Sample
0aaabf472516fbf80afe0afac2436770_NeikiAnalytics.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
0aaabf472516fbf80afe0afac2436770_NeikiAnalytics.exe
-
Size
65KB
-
MD5
0aaabf472516fbf80afe0afac2436770
-
SHA1
ce06489e94925cb56a3b6a959e3ef39f30581d9a
-
SHA256
3389a549fc8673b1c940cf339408d4d0491983eac0c6542f5e3e42fc7bb56efc
-
SHA512
4a9abdf23419bfd5cd907d8f242aaeed84a102265c4b59dfe395d4c8659b702fb2589e8eb573d1fd45e6324b718113d6560331b27697d5321bbd790cf4cec64d
-
SSDEEP
1536:NfWuU+ktZ1l0Tu5lKiOZflVtTixnVNh8TmzPmUw+D1Y/6xhOM:tW/13STuvZOZfxm4TGPmUw+D+/Mhz
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
5Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3