General

  • Target

    c404669653d10076017ac2a3769367c0_NeikiAnalytics.exe

  • Size

    71KB

  • Sample

    240523-f7514sfc5x

  • MD5

    c404669653d10076017ac2a3769367c0

  • SHA1

    983e476dbbd1ef98c78bedaf32f0a63ddb35b646

  • SHA256

    c63548bc40584532040573f155c7d12d9a1e7b8275442f2ab303ba79ab5f1423

  • SHA512

    28e2e34315d2f72bda168e1c57771f3212a3addec62b374ca130ddcbcea2a6b51961d4ac506716bc8ed16fe329873a13e1b2c5178bfd67ed2e48c56f161bc6df

  • SSDEEP

    1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slL:Olg35GTslA5t3/w82

Malware Config

Targets

    • Target

      c404669653d10076017ac2a3769367c0_NeikiAnalytics.exe

    • Size

      71KB

    • MD5

      c404669653d10076017ac2a3769367c0

    • SHA1

      983e476dbbd1ef98c78bedaf32f0a63ddb35b646

    • SHA256

      c63548bc40584532040573f155c7d12d9a1e7b8275442f2ab303ba79ab5f1423

    • SHA512

      28e2e34315d2f72bda168e1c57771f3212a3addec62b374ca130ddcbcea2a6b51961d4ac506716bc8ed16fe329873a13e1b2c5178bfd67ed2e48c56f161bc6df

    • SSDEEP

      1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slL:Olg35GTslA5t3/w82

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Defense Evasion

Impair Defenses

2
T1562

Disable or Modify Tools

2
T1562.001

Modify Registry

5
T1112

Tasks