4e65c8a3924a79cb8a4124f30e3c4bc3d18e727294631a5b094c6af6c4b686e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

134ab09efb712b175b3949d7d2fa4460_NeikiAnalytics.exe
Size

71KB
Sample

240517-wk6xwsbf53
MD5

134ab09efb712b175b3949d7d2fa4460
SHA1

e05c0ead7fea02a461d2b4344c700c353152120c
SHA256

4e65c8a3924a79cb8a4124f30e3c4bc3d18e727294631a5b094c6af6c4b686e7
SHA512

069acf99e36a43b3663c971a47256c307fb9be95a2f258f345368e45203ccd4b6dcb82afdff78fd52032df047aa9bc376f9b692d0a0e17e5568c6bd301cda5e4
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slP:Olg35GTslA5t3/w8w

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  134ab09efb712b175b3949d7d2fa4460_NeikiAnalytics.exe
- Size
  
  71KB
- MD5
  
  134ab09efb712b175b3949d7d2fa4460
- SHA1
  
  e05c0ead7fea02a461d2b4344c700c353152120c
- SHA256
  
  4e65c8a3924a79cb8a4124f30e3c4bc3d18e727294631a5b094c6af6c4b686e7
- SHA512
  
  069acf99e36a43b3663c971a47256c307fb9be95a2f258f345368e45203ccd4b6dcb82afdff78fd52032df047aa9bc376f9b692d0a0e17e5568c6bd301cda5e4
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slP:Olg35GTslA5t3/w8w
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan