General
-
Target
de9e8362fdbe0d774fa9ebb3bbd211a0_NeikiAnalytics.exe
-
Size
120KB
-
Sample
240517-khdmsaaa64
-
MD5
de9e8362fdbe0d774fa9ebb3bbd211a0
-
SHA1
3c88eed62738b3e9c96b23b296eef72de6da0d6b
-
SHA256
8bac5c062990ac0b7246c8dfb6a117df6d63d7e27224107840520aa8a31d50c2
-
SHA512
9010ae108116a0ef630f32301aca325860dde1ca47998f38e600875a22662522829357f7df02ed73189abb2d18760f142b0340fa86a52b9057cd872ead256253
-
SSDEEP
3072:HffksPMZYdBeo9cJzDTeN7p1PuHX5WbWleqS/R:/5kFo9eDKN7u35LlD
Static task
static1
Behavioral task
behavioral1
Sample
de9e8362fdbe0d774fa9ebb3bbd211a0_NeikiAnalytics.dll
Resource
win7-20240508-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
de9e8362fdbe0d774fa9ebb3bbd211a0_NeikiAnalytics.exe
-
Size
120KB
-
MD5
de9e8362fdbe0d774fa9ebb3bbd211a0
-
SHA1
3c88eed62738b3e9c96b23b296eef72de6da0d6b
-
SHA256
8bac5c062990ac0b7246c8dfb6a117df6d63d7e27224107840520aa8a31d50c2
-
SHA512
9010ae108116a0ef630f32301aca325860dde1ca47998f38e600875a22662522829357f7df02ed73189abb2d18760f142b0340fa86a52b9057cd872ead256253
-
SSDEEP
3072:HffksPMZYdBeo9cJzDTeN7p1PuHX5WbWleqS/R:/5kFo9eDKN7u35LlD
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5