3a648e9a1de3bd80c44584a839cae7818e5c3a008f7b9010978ef9d48c01f1fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e84936553c8b8a80652b44bfa7b7c350_NeikiAnalytics.exe
Size

71KB
Sample

240517-ly5lwacf51
MD5

e84936553c8b8a80652b44bfa7b7c350
SHA1

9b661bd5402ee9badf9ebfe4c3d7d98631423987
SHA256

3a648e9a1de3bd80c44584a839cae7818e5c3a008f7b9010978ef9d48c01f1fd
SHA512

f677a11756d3b76a3b583ba216262ebdff6f51b6dddd9d07f57c46faace024c12c8cfc0d1dbdcb955c743360cffeecac2acb48b708628f5b525bd913aa7bb4eb
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl6Sx5:Olg35GTslA5t3/w8sx5

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  e84936553c8b8a80652b44bfa7b7c350_NeikiAnalytics.exe
- Size
  
  71KB
- MD5
  
  e84936553c8b8a80652b44bfa7b7c350
- SHA1
  
  9b661bd5402ee9badf9ebfe4c3d7d98631423987
- SHA256
  
  3a648e9a1de3bd80c44584a839cae7818e5c3a008f7b9010978ef9d48c01f1fd
- SHA512
  
  f677a11756d3b76a3b583ba216262ebdff6f51b6dddd9d07f57c46faace024c12c8cfc0d1dbdcb955c743360cffeecac2acb48b708628f5b525bd913aa7bb4eb
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl6Sx5:Olg35GTslA5t3/w8sx5
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan