General
-
Target
dca4d38a685d77497813fcc67716f020_NeikiAnalytics.exe
-
Size
120KB
-
Sample
240518-sbpqgagh4t
-
MD5
dca4d38a685d77497813fcc67716f020
-
SHA1
ce938d10b8abd1126ac8d1e5e5dbc6f4b55573a6
-
SHA256
39c84a6897b7f87d3ab0aa58539a126ddc1e325ba2260bb801f0152feca109ed
-
SHA512
7ddc03634074ed983f594ab9d9ae7694352c7a66c59a843ec9e77c76566067ab493aa690cb268df77c04cd4aa4fc666efaf0b381fee7034b033bfb5379bd26c7
-
SSDEEP
1536:csrq81iCj0GexXxuQ55iRLPvJmVR0LghGQ0Yq1SKzJG5RX+8xjV+hM4ZZg6AkmKE:cIMmexXxLnYhmN4FYJKVXYV+hNJA5
Static task
static1
Behavioral task
behavioral1
Sample
dca4d38a685d77497813fcc67716f020_NeikiAnalytics.dll
Resource
win7-20240419-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
dca4d38a685d77497813fcc67716f020_NeikiAnalytics.exe
-
Size
120KB
-
MD5
dca4d38a685d77497813fcc67716f020
-
SHA1
ce938d10b8abd1126ac8d1e5e5dbc6f4b55573a6
-
SHA256
39c84a6897b7f87d3ab0aa58539a126ddc1e325ba2260bb801f0152feca109ed
-
SHA512
7ddc03634074ed983f594ab9d9ae7694352c7a66c59a843ec9e77c76566067ab493aa690cb268df77c04cd4aa4fc666efaf0b381fee7034b033bfb5379bd26c7
-
SSDEEP
1536:csrq81iCj0GexXxuQ55iRLPvJmVR0LghGQ0Yq1SKzJG5RX+8xjV+hM4ZZg6AkmKE:cIMmexXxLnYhmN4FYJKVXYV+hNJA5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
5Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3