f7dd8ee0bce237401e787a46a2bc56d8091c8cfc32f9e4fadb79f735b2d3c882 | Triage

Sharing

General

Target

4534edabcb4897682c44ee20fafd0420_NeikiAnalytics.exe
Size

73KB
Sample

240522-1rv67aad37
MD5

4534edabcb4897682c44ee20fafd0420
SHA1

1fcf02200e4dea2bae65634948125581dc00a8de
SHA256

f7dd8ee0bce237401e787a46a2bc56d8091c8cfc32f9e4fadb79f735b2d3c882
SHA512

dbf53b1fb0f45905d086e8e7d33d5d4ecbe3cd7ed75b64ec511f4bbf50aeaf75261ebe3b7c343c88f2bd1886cc7903fe81c90e16e89556d62db3823097d80c75
SSDEEP

768:x/naIuoI9Igg93neKR3j0zOkbAQ9w9tCn6bch2Hv04F6G6UWEnvyciQvoyHvhAH4:xFIolkbAz986b784UUWcaciQvoyHveRW

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  4534edabcb4897682c44ee20fafd0420_NeikiAnalytics.exe
- Size
  
  73KB
- MD5
  
  4534edabcb4897682c44ee20fafd0420
- SHA1
  
  1fcf02200e4dea2bae65634948125581dc00a8de
- SHA256
  
  f7dd8ee0bce237401e787a46a2bc56d8091c8cfc32f9e4fadb79f735b2d3c882
- SHA512
  
  dbf53b1fb0f45905d086e8e7d33d5d4ecbe3cd7ed75b64ec511f4bbf50aeaf75261ebe3b7c343c88f2bd1886cc7903fe81c90e16e89556d62db3823097d80c75
- SSDEEP
  
  768:x/naIuoI9Igg93neKR3j0zOkbAQ9w9tCn6bch2Hv04F6G6UWEnvyciQvoyHvhAH4:xFIolkbAz986b784UUWcaciQvoyHveRW
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan