020d6ec9e3fc3f2d575a4b21ff3936f708609fa2c7761f3f65df61275e7656db | Triage

Sharing

General

Target

5da3672e030586cc65c5096a4b15eb50_NeikiAnalytics.exe
Size

72KB
Sample

240523-aah77aeb42
MD5

5da3672e030586cc65c5096a4b15eb50
SHA1

1e6a7d97339a68bd694e8aa869343b81738c2389
SHA256

020d6ec9e3fc3f2d575a4b21ff3936f708609fa2c7761f3f65df61275e7656db
SHA512

f610afec908f3e910bab21e995594023ca3426a9be8887fc4e6fe91c9069580888e47f64afa22673a38e426308fd4f2312f4fa4605a43bfb162be072e968b7a4
SSDEEP

1536:xBoj3/OgHIerbSSuf9c/buo4iiugZb6hCPmXeu0XyxsdvDKco:noDvHDrbTuf9abJiugV6hyu0XyxsdvDW

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5da3672e030586cc65c5096a4b15eb50_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  5da3672e030586cc65c5096a4b15eb50
- SHA1
  
  1e6a7d97339a68bd694e8aa869343b81738c2389
- SHA256
  
  020d6ec9e3fc3f2d575a4b21ff3936f708609fa2c7761f3f65df61275e7656db
- SHA512
  
  f610afec908f3e910bab21e995594023ca3426a9be8887fc4e6fe91c9069580888e47f64afa22673a38e426308fd4f2312f4fa4605a43bfb162be072e968b7a4
- SSDEEP
  
  1536:xBoj3/OgHIerbSSuf9c/buo4iiugZb6hCPmXeu0XyxsdvDKco:noDvHDrbTuf9abJiugV6hyu0XyxsdvDW
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan