General

  • Target

    3b740935520147afea5b306d569097b0_NeikiAnalytics.exe

  • Size

    34KB

  • Sample

    240522-zxh85sgf3w

  • MD5

    3b740935520147afea5b306d569097b0

  • SHA1

    342a270999b4bd8424a2841edf8d6d7b53f862a8

  • SHA256

    933b5acb7c2ccb1ebdb4612e907a2627757844178d1077b7a0c404eac1051ae2

  • SHA512

    49e052880c28539e8357f10bc188e43fd818a9a5c24114e872696a53a7186785f1629201c1778ddd1324846844011db5a117c5af1f9d83ddbab05624c57bb0af

  • SSDEEP

    768:UEzNbLcQ9qQuVriDMuyuruTD0qB77777J77c77c77c7nOTysMljy:l3h9qQA6hZunrB77777J77c77c77c7O7

Score
10/10

Malware Config

Targets

    • Target

      3b740935520147afea5b306d569097b0_NeikiAnalytics.exe

    • Size

      34KB

    • MD5

      3b740935520147afea5b306d569097b0

    • SHA1

      342a270999b4bd8424a2841edf8d6d7b53f862a8

    • SHA256

      933b5acb7c2ccb1ebdb4612e907a2627757844178d1077b7a0c404eac1051ae2

    • SHA512

      49e052880c28539e8357f10bc188e43fd818a9a5c24114e872696a53a7186785f1629201c1778ddd1324846844011db5a117c5af1f9d83ddbab05624c57bb0af

    • SSDEEP

      768:UEzNbLcQ9qQuVriDMuyuruTD0qB77777J77c77c77c7nOTysMljy:l3h9qQA6hZunrB77777J77c77c77c7O7

    Score
    10/10
    • Modifies WinLogon for persistence

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks