General

  • Target

    8adf8d8bc812fbc0e648b3b62fcbac60_NeikiAnalytics.exe

  • Size

    44KB

  • Sample

    240520-cl1ygsfd3z

  • MD5

    8adf8d8bc812fbc0e648b3b62fcbac60

  • SHA1

    a623f0e087aff09cfb2405c66b4cf5aa40ae9c98

  • SHA256

    99437f374340245c9225424ee8cb8a85607179c82d454b29d0499e7431dcefd3

  • SHA512

    03ee97bab3fea1fd1bcfb302f2d7ae458d7d6830ac6fb5ff8867c2c254bc474d2f1543e08ffd5f2c0e8d22123202fc46c7ebe24e5c061b33bbf206adae88aadc

  • SSDEEP

    768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQvKMb7rC:RUNHFKQbIkHvGkAFu7e

Malware Config

Targets

    • Target

      8adf8d8bc812fbc0e648b3b62fcbac60_NeikiAnalytics.exe

    • Size

      44KB

    • MD5

      8adf8d8bc812fbc0e648b3b62fcbac60

    • SHA1

      a623f0e087aff09cfb2405c66b4cf5aa40ae9c98

    • SHA256

      99437f374340245c9225424ee8cb8a85607179c82d454b29d0499e7431dcefd3

    • SHA512

      03ee97bab3fea1fd1bcfb302f2d7ae458d7d6830ac6fb5ff8867c2c254bc474d2f1543e08ffd5f2c0e8d22123202fc46c7ebe24e5c061b33bbf206adae88aadc

    • SSDEEP

      768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQvKMb7rC:RUNHFKQbIkHvGkAFu7e

    • Windows security bypass

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks