35751a7b2af7288dbdc14d7bb4520b17cca398718f6cafe60b93159fe6728ab6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

668bc6171590742515989731a2e5ac10_NeikiAnalytics.exe
Size

73KB
Sample

240517-arvmjsgg8w
MD5

668bc6171590742515989731a2e5ac10
SHA1

8b5c83a33485c8e3d4005227976052f8f64d28ae
SHA256

35751a7b2af7288dbdc14d7bb4520b17cca398718f6cafe60b93159fe6728ab6
SHA512

1a05f90dcaa39f5303462cfd70ddc3893760b04a16d492d12236f2dfdb835a5db1571474b22c16ad3c9e7ca6fbb43bf3961f8b7f018299a8ea0b714a887a7498
SSDEEP

1536:xQ3YrzjzGabh9X0PCig8Hf7j6iQ3e7Oryo:qizj7bhtMC98/7pIe79o

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  668bc6171590742515989731a2e5ac10_NeikiAnalytics.exe
- Size
  
  73KB
- MD5
  
  668bc6171590742515989731a2e5ac10
- SHA1
  
  8b5c83a33485c8e3d4005227976052f8f64d28ae
- SHA256
  
  35751a7b2af7288dbdc14d7bb4520b17cca398718f6cafe60b93159fe6728ab6
- SHA512
  
  1a05f90dcaa39f5303462cfd70ddc3893760b04a16d492d12236f2dfdb835a5db1571474b22c16ad3c9e7ca6fbb43bf3961f8b7f018299a8ea0b714a887a7498
- SSDEEP
  
  1536:xQ3YrzjzGabh9X0PCig8Hf7j6iQ3e7Oryo:qizj7bhtMC98/7pIe79o
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistencetrojan