General
-
Target
e29596c87bece3c26cf8c8e0e768bcc0_NeikiAnalytics.exe
-
Size
1.4MB
-
Sample
240517-ks16tsaf42
-
MD5
e29596c87bece3c26cf8c8e0e768bcc0
-
SHA1
0aa46000e5b9200e441246c0628b69d0727a0a72
-
SHA256
efaca9be3f27a1b370e45cef80d8edf805b5df41e29dcbfb41066d09e3efbfb8
-
SHA512
c35cd30ba9f423235155d4a6679ad1055aa393cf5efbc34a3b49d14841caa084ef8dcb8941857e199901c0637b60c3f0c7aab74195d0c5b29e39f010b3ad7ad1
-
SSDEEP
24576:rsFRhoq8oLxlGuzAGKFDuXNR2TGxTEcuC+/Kt+/:Syo3xKFDuXA2TTc/48
Static task
static1
Behavioral task
behavioral1
Sample
e29596c87bece3c26cf8c8e0e768bcc0_NeikiAnalytics.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
e29596c87bece3c26cf8c8e0e768bcc0_NeikiAnalytics.exe
-
Size
1.4MB
-
MD5
e29596c87bece3c26cf8c8e0e768bcc0
-
SHA1
0aa46000e5b9200e441246c0628b69d0727a0a72
-
SHA256
efaca9be3f27a1b370e45cef80d8edf805b5df41e29dcbfb41066d09e3efbfb8
-
SHA512
c35cd30ba9f423235155d4a6679ad1055aa393cf5efbc34a3b49d14841caa084ef8dcb8941857e199901c0637b60c3f0c7aab74195d0c5b29e39f010b3ad7ad1
-
SSDEEP
24576:rsFRhoq8oLxlGuzAGKFDuXNR2TGxTEcuC+/Kt+/:Syo3xKFDuXA2TTc/48
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1