General
-
Target
43d75978219f48d16a80564c7e2ee510_NeikiAnalytics.exe
-
Size
120KB
-
Sample
240517-2b8b9aec2v
-
MD5
43d75978219f48d16a80564c7e2ee510
-
SHA1
b8a4b3a0933ac27d26faf74daf4af944d8840954
-
SHA256
865c17f44ff15e57cebe4c6846a85cb23d11163b9ad369add358cd8154cc2ac4
-
SHA512
15235a51f739349fd81e959142301d4f8e4ec3da8ba2a7e098deb17c91dee5de12685d7fef55010aa68f4011a5ff6aca9521fdc4f2810dc85de393b7fcf62d45
-
SSDEEP
3072:VXJ+QyueK9bScLGQjokLwbQWBSTF+X2g82Wn5pS0H:VXTyueiGQibQWmO2gx25g0
Static task
static1
Behavioral task
behavioral1
Sample
43d75978219f48d16a80564c7e2ee510_NeikiAnalytics.dll
Resource
win7-20240508-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
43d75978219f48d16a80564c7e2ee510_NeikiAnalytics.exe
-
Size
120KB
-
MD5
43d75978219f48d16a80564c7e2ee510
-
SHA1
b8a4b3a0933ac27d26faf74daf4af944d8840954
-
SHA256
865c17f44ff15e57cebe4c6846a85cb23d11163b9ad369add358cd8154cc2ac4
-
SHA512
15235a51f739349fd81e959142301d4f8e4ec3da8ba2a7e098deb17c91dee5de12685d7fef55010aa68f4011a5ff6aca9521fdc4f2810dc85de393b7fcf62d45
-
SSDEEP
3072:VXJ+QyueK9bScLGQjokLwbQWBSTF+X2g82Wn5pS0H:VXTyueiGQibQWmO2gx25g0
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
5Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3