d257dae62ad6ad306b0627d4f72440659189146f6cbe044e2e0cac67017944a5 | Triage

Sharing

General

Target

218766a42d60756b11de22d5f6a8ae10_NeikiAnalytics.exe
Size

5.5MB
Sample

240519-xz4lrade48
MD5

218766a42d60756b11de22d5f6a8ae10
SHA1

c607c71caa674a1efe47537460b775fa64496f09
SHA256

d257dae62ad6ad306b0627d4f72440659189146f6cbe044e2e0cac67017944a5
SHA512

9900550a64dd030b3bc8910975f18213f8ed9b0ba6cb8e9ab6f3d8d2e9687961f086570be3a79a7770ab8833f4cbb49284088efb12ec11d30024a26a7a3a6a08
SSDEEP

98304:oseHlHdc5b9dXLVi2xIb7S1fw7pXyZ7oz0R5uz0rbJagkW7kOLIx1qxz8hjFrZBv:Bem17h10XvwPhagz7q2wNPQ00w

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  218766a42d60756b11de22d5f6a8ae10_NeikiAnalytics.exe
- Size
  
  5.5MB
- MD5
  
  218766a42d60756b11de22d5f6a8ae10
- SHA1
  
  c607c71caa674a1efe47537460b775fa64496f09
- SHA256
  
  d257dae62ad6ad306b0627d4f72440659189146f6cbe044e2e0cac67017944a5
- SHA512
  
  9900550a64dd030b3bc8910975f18213f8ed9b0ba6cb8e9ab6f3d8d2e9687961f086570be3a79a7770ab8833f4cbb49284088efb12ec11d30024a26a7a3a6a08
- SSDEEP
  
  98304:oseHlHdc5b9dXLVi2xIb7S1fw7pXyZ7oz0R5uz0rbJagkW7kOLIx1qxz8hjFrZBv:Bem17h10XvwPhagz7q2wNPQ00w
Score

8^/10

persistence
- Sets file execution options in registry
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2