General
-
Target
3eebe1d61de9cc9cc17a09a66dfe5690_NeikiAnalytics.exe
-
Size
120KB
-
Sample
240522-z73ershd24
-
MD5
3eebe1d61de9cc9cc17a09a66dfe5690
-
SHA1
1d17f2941241e2a8575163376b3761ff0aa9fa7c
-
SHA256
12fe9a9c9948885c92d0517d763f15e0083b7e7cd7389df082d4925bda8bf68a
-
SHA512
04e172c34c59b69910893b27a2e5a843063710a12ec781bd449a4ae5f054c8373220ed319bb473f412486f527cefb712ebdc443d28a59ad4ac9ec40ceee5bdc3
-
SSDEEP
1536:q5N6dWVb6qAomWGQ05aykMdC0qL0rXF0JQBZyPVmh5OMi6embfD1advfXmzJx6al:DWVZMgJMVq00AMI5OMzembY+VBAuG
Static task
static1
Behavioral task
behavioral1
Sample
3eebe1d61de9cc9cc17a09a66dfe5690_NeikiAnalytics.dll
Resource
win7-20240220-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
3eebe1d61de9cc9cc17a09a66dfe5690_NeikiAnalytics.exe
-
Size
120KB
-
MD5
3eebe1d61de9cc9cc17a09a66dfe5690
-
SHA1
1d17f2941241e2a8575163376b3761ff0aa9fa7c
-
SHA256
12fe9a9c9948885c92d0517d763f15e0083b7e7cd7389df082d4925bda8bf68a
-
SHA512
04e172c34c59b69910893b27a2e5a843063710a12ec781bd449a4ae5f054c8373220ed319bb473f412486f527cefb712ebdc443d28a59ad4ac9ec40ceee5bdc3
-
SSDEEP
1536:q5N6dWVb6qAomWGQ05aykMdC0qL0rXF0JQBZyPVmh5OMi6embfD1advfXmzJx6al:DWVZMgJMVq00AMI5OMzembY+VBAuG
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5