fdb1e6c9bccc61b9e3bab5c1abd52c1040a03af9b8e3a04f74b2bc5b26f59cda | Triage

Sharing

General

Target

6948989065a91523bb1aef817fa944d0_NeikiAnalytics.exe
Size

28KB
Sample

240523-bgy3nafh21
MD5

6948989065a91523bb1aef817fa944d0
SHA1

40ea2b260d7b250e23939e38fc19449f79138a17
SHA256

fdb1e6c9bccc61b9e3bab5c1abd52c1040a03af9b8e3a04f74b2bc5b26f59cda
SHA512

724fcaea3e1b2a19072c74e1330351ca04afd1f8efdca6ad00cbd24316866e660555bb9f31c4f4b3b97b5fe99b727583f8fbd1b1c4d912697b7ee4e9bec542ee
SSDEEP

768:PVEHJqjHyGvwFylDpulVSQJrE/2QmlCYZUNZ2G:PH2nylslwHCCLZ

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  6948989065a91523bb1aef817fa944d0_NeikiAnalytics.exe
- Size
  
  28KB
- MD5
  
  6948989065a91523bb1aef817fa944d0
- SHA1
  
  40ea2b260d7b250e23939e38fc19449f79138a17
- SHA256
  
  fdb1e6c9bccc61b9e3bab5c1abd52c1040a03af9b8e3a04f74b2bc5b26f59cda
- SHA512
  
  724fcaea3e1b2a19072c74e1330351ca04afd1f8efdca6ad00cbd24316866e660555bb9f31c4f4b3b97b5fe99b727583f8fbd1b1c4d912697b7ee4e9bec542ee
- SSDEEP
  
  768:PVEHJqjHyGvwFylDpulVSQJrE/2QmlCYZUNZ2G:PH2nylslwHCCLZ
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2