c60f3790018d9dcb3433df7a2928977853635d440a3ba1284873607a1faf8d0d | Triage

Sharing

General

Target

0cebffcc508b9c908596fe6233d0b410_NeikiAnalytics.exe
Size

72KB
Sample

240521-zm9cksab51
MD5

0cebffcc508b9c908596fe6233d0b410
SHA1

ecbcf8bcca3e54ecde58a1ac6b19e2e15b1fb113
SHA256

c60f3790018d9dcb3433df7a2928977853635d440a3ba1284873607a1faf8d0d
SHA512

fa80a4729c1b2de9e63e969659d0eeac75efe554579e5a234260824b9a29a7a0d7cfbcad6d0542322ea6426b88c01fc99524b13f44abbc7cc36c6b596931f692
SSDEEP

768:x/nGhX+OZMUpVzJKsMIWqH3N7GLCMa7kmewpUn/LwSUBPkvgjzkQyTDbAFd2Pm5i:xYX+EMU/zobY39qoowSUBPkzQyzAsGTk

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0cebffcc508b9c908596fe6233d0b410_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  0cebffcc508b9c908596fe6233d0b410
- SHA1
  
  ecbcf8bcca3e54ecde58a1ac6b19e2e15b1fb113
- SHA256
  
  c60f3790018d9dcb3433df7a2928977853635d440a3ba1284873607a1faf8d0d
- SHA512
  
  fa80a4729c1b2de9e63e969659d0eeac75efe554579e5a234260824b9a29a7a0d7cfbcad6d0542322ea6426b88c01fc99524b13f44abbc7cc36c6b596931f692
- SSDEEP
  
  768:x/nGhX+OZMUpVzJKsMIWqH3N7GLCMa7kmewpUn/LwSUBPkvgjzkQyTDbAFd2Pm5i:xYX+EMU/zobY39qoowSUBPkzQyzAsGTk
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan