a906d05120806d81fefb52fb80c654115f3344590c5aa82606b194be631e8f6f | Triage

Sharing

General

Target

a2825fa8d857b0e5a7e4590507427490_NeikiAnalytics.exe
Size

2.3MB
Sample

240524-emrsbace48
MD5

a2825fa8d857b0e5a7e4590507427490
SHA1

1c1763e563e1101eaee4bfae454343b96bbb3dc1
SHA256

a906d05120806d81fefb52fb80c654115f3344590c5aa82606b194be631e8f6f
SHA512

6764db07ef2bfbbd3198305133c4ae08f359740a4d5c0eaa552910f6cd9dadfd7a1b63660c4cd60ae294e1f7bab5ce91b3c7abaca38a02bf0127ce2872b409e8
SSDEEP

49152:HInjWc480NJDKQY/ooQr2somKrmPBky6vNJkFnt6vkg:QWLDKfXQTobmXFtJ

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  a2825fa8d857b0e5a7e4590507427490_NeikiAnalytics.exe
- Size
  
  2.3MB
- MD5
  
  a2825fa8d857b0e5a7e4590507427490
- SHA1
  
  1c1763e563e1101eaee4bfae454343b96bbb3dc1
- SHA256
  
  a906d05120806d81fefb52fb80c654115f3344590c5aa82606b194be631e8f6f
- SHA512
  
  6764db07ef2bfbbd3198305133c4ae08f359740a4d5c0eaa552910f6cd9dadfd7a1b63660c4cd60ae294e1f7bab5ce91b3c7abaca38a02bf0127ce2872b409e8
- SSDEEP
  
  49152:HInjWc480NJDKQY/ooQr2somKrmPBky6vNJkFnt6vkg:QWLDKfXQTobmXFtJ
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2