General

  • Target

    5ea2d1bc112f748ebbb0d814e1d9df10_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240523-aewzvaec93

  • MD5

    5ea2d1bc112f748ebbb0d814e1d9df10

  • SHA1

    26dcbb635599d5a2bbea55bead8d2645a87949d8

  • SHA256

    d419ddf7d29edb66baf0c82343ea0e05c3c59ca672df88c1a8c2577d77f251eb

  • SHA512

    217bea3495167d8f519d707727ad90e2faf6f569143136ca8c4d4d121771f695859b4f2d3fd56293c2aef227973e1d6d2ca391b31f75f7fc149ae2e3639e09d6

  • SSDEEP

    1536:fli+E0nQY80O9ZPYN/3xVdK3dzxXCuPEQFFnFF/FFnFFnFFzFFzFFzFFrbFFFFFs:dc0nQ3bLeP6zCuPdwWJ1d69jc0vf

Score
10/10

Malware Config

Targets

    • Target

      5ea2d1bc112f748ebbb0d814e1d9df10_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      5ea2d1bc112f748ebbb0d814e1d9df10

    • SHA1

      26dcbb635599d5a2bbea55bead8d2645a87949d8

    • SHA256

      d419ddf7d29edb66baf0c82343ea0e05c3c59ca672df88c1a8c2577d77f251eb

    • SHA512

      217bea3495167d8f519d707727ad90e2faf6f569143136ca8c4d4d121771f695859b4f2d3fd56293c2aef227973e1d6d2ca391b31f75f7fc149ae2e3639e09d6

    • SSDEEP

      1536:fli+E0nQY80O9ZPYN/3xVdK3dzxXCuPEQFFnFF/FFnFFnFFzFFzFFzFFrbFFFFFs:dc0nQ3bLeP6zCuPdwWJ1d69jc0vf

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks