General
-
Target
c31aaf5a06d1f8743f767d86aa17f5b0_NeikiAnalytics.exe
-
Size
97KB
-
Sample
240520-g2ywaafg5t
-
MD5
c31aaf5a06d1f8743f767d86aa17f5b0
-
SHA1
12ae691074c721fc537314f954f98e58c3781a94
-
SHA256
41987d9da52b7990aba18c5eb4bfdfc56b54f020489af1da3e433b0d62bcc5e2
-
SHA512
7f459d2d3164ba93ecc96cf30d71d7a44b87e1641425b6ff8a29531920298aaa32daf21eb4c42806c53dc880a8e26a0f9fef9d2133b56d72c6dc89941c9903bf
-
SSDEEP
1536:01Jmj3upmh5geYjyXiVcuz2zw1ixNwCy064BLXCw/Q:0Oz3h5geYeXiVcuOw1cNwCCPG
Static task
static1
Behavioral task
behavioral1
Sample
c31aaf5a06d1f8743f767d86aa17f5b0_NeikiAnalytics.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
c31aaf5a06d1f8743f767d86aa17f5b0_NeikiAnalytics.exe
-
Size
97KB
-
MD5
c31aaf5a06d1f8743f767d86aa17f5b0
-
SHA1
12ae691074c721fc537314f954f98e58c3781a94
-
SHA256
41987d9da52b7990aba18c5eb4bfdfc56b54f020489af1da3e433b0d62bcc5e2
-
SHA512
7f459d2d3164ba93ecc96cf30d71d7a44b87e1641425b6ff8a29531920298aaa32daf21eb4c42806c53dc880a8e26a0f9fef9d2133b56d72c6dc89941c9903bf
-
SSDEEP
1536:01Jmj3upmh5geYjyXiVcuz2zw1ixNwCy064BLXCw/Q:0Oz3h5geYeXiVcuOw1cNwCCPG
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
5Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3