General
-
Target
a5070897b128088a076661980dc42c60_NeikiAnalytics.exe
-
Size
65KB
-
Sample
240524-ewbgpach42
-
MD5
a5070897b128088a076661980dc42c60
-
SHA1
0473678d6718ecee96bddc07c8194f1566f65001
-
SHA256
68da8e127add1900a344fca833d5569fa565f5f7dd97e42e98d167336ac637b1
-
SHA512
243c9217ae6a9b140690d82de8c814fee8016f4a9c83e76e65a9a13e4650bd205c8624e32b813d715fd7d1012664d3e2f52b9195377da4d1cffe5e8ca6de5f60
-
SSDEEP
1536:obu4ZKoxKCYp0xNsCGn/tPmGaJm/IN9Er6bP4JMff7Z:zgKGXxc1PuJB9g6bdff7Z
Static task
static1
Behavioral task
behavioral1
Sample
a5070897b128088a076661980dc42c60_NeikiAnalytics.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
a5070897b128088a076661980dc42c60_NeikiAnalytics.exe
-
Size
65KB
-
MD5
a5070897b128088a076661980dc42c60
-
SHA1
0473678d6718ecee96bddc07c8194f1566f65001
-
SHA256
68da8e127add1900a344fca833d5569fa565f5f7dd97e42e98d167336ac637b1
-
SHA512
243c9217ae6a9b140690d82de8c814fee8016f4a9c83e76e65a9a13e4650bd205c8624e32b813d715fd7d1012664d3e2f52b9195377da4d1cffe5e8ca6de5f60
-
SSDEEP
1536:obu4ZKoxKCYp0xNsCGn/tPmGaJm/IN9Er6bP4JMff7Z:zgKGXxc1PuJB9g6bdff7Z
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
5Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3