c2e8a793242ac5bd973e80a28eed04f0ee12e0692590ceb931b3b190ff5391e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fecf6396a385b0f3a185c786a01db20_NeikiAnalytics.exe
Size

72KB
Sample

240517-zkz15aac6t
MD5

2fecf6396a385b0f3a185c786a01db20
SHA1

be8ca5b00be0740df4c59b830661a2594a04da56
SHA256

c2e8a793242ac5bd973e80a28eed04f0ee12e0692590ceb931b3b190ff5391e6
SHA512

e5cd65549bdeea849a1c3b920cf9d90ff9552b0287a0b9152e4c50b385589887fd57ed29ffa3223b5e955e3d97f0177f5469365f100969050bcf98275d78c376
SSDEEP

1536:xBoj3/OgHIerbSSuf9c/buo4iiugZb6hCPmXeu0XyxsdvDKc1:noDvHDrbTuf9abJiugV6hyu0XyxsdvDT

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  2fecf6396a385b0f3a185c786a01db20_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  2fecf6396a385b0f3a185c786a01db20
- SHA1
  
  be8ca5b00be0740df4c59b830661a2594a04da56
- SHA256
  
  c2e8a793242ac5bd973e80a28eed04f0ee12e0692590ceb931b3b190ff5391e6
- SHA512
  
  e5cd65549bdeea849a1c3b920cf9d90ff9552b0287a0b9152e4c50b385589887fd57ed29ffa3223b5e955e3d97f0177f5469365f100969050bcf98275d78c376
- SSDEEP
  
  1536:xBoj3/OgHIerbSSuf9c/buo4iiugZb6hCPmXeu0XyxsdvDKc1:noDvHDrbTuf9abJiugV6hyu0XyxsdvDT
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan