4f1ada83f73dd29355aa5b9307d8c97291c9f9b7d3520856035d0989de35ca5f | Triage

Sharing

General

Target

101e10719636c1fa6cefa3980a3d1b60_NeikiAnalytics.exe
Size

408KB
Sample

240522-ytyzraee9t
MD5

101e10719636c1fa6cefa3980a3d1b60
SHA1

5aab6235f58c4fc19b2526cc76fa2f0210ecbc46
SHA256

4f1ada83f73dd29355aa5b9307d8c97291c9f9b7d3520856035d0989de35ca5f
SHA512

58fa9720f8d2950625bfd642aad0967d7293c826d2e928e983603fa813c01877f180167346afb1225e4571f7f5e08035cc26907fb4499abc4ea95e8dd3e2a5bb
SSDEEP

6144:4jlYKRF/LReWAsUyMJpFNxfRCnfVhSLlGmoIyOO/RCEcaCfH6:4jauDReWmv5InfWxXoIynpCEcu

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  101e10719636c1fa6cefa3980a3d1b60_NeikiAnalytics.exe
- Size
  
  408KB
- MD5
  
  101e10719636c1fa6cefa3980a3d1b60
- SHA1
  
  5aab6235f58c4fc19b2526cc76fa2f0210ecbc46
- SHA256
  
  4f1ada83f73dd29355aa5b9307d8c97291c9f9b7d3520856035d0989de35ca5f
- SHA512
  
  58fa9720f8d2950625bfd642aad0967d7293c826d2e928e983603fa813c01877f180167346afb1225e4571f7f5e08035cc26907fb4499abc4ea95e8dd3e2a5bb
- SSDEEP
  
  6144:4jlYKRF/LReWAsUyMJpFNxfRCnfVhSLlGmoIyOO/RCEcaCfH6:4jauDReWmv5InfWxXoIynpCEcu
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2