9d59d04e6c49dfe73dc8238cd1a181e8903ed8bda16c7c00ba53e28fa7ab1207 | Triage™

Login
Reports

Overview

overview

Static

static

3

2afe40ce7e...cs.exe

windows7-x64

2afe40ce7e...cs.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
2afe40ce7e046fb1bb6120ba2d04a060_NeikiAnalytics.exe
Size 70KB
Sample240525-2d749sdc97
SHA256 9d59d04e6c49dfe73dc8238cd1a181e8903ed8bda16c7c00ba53e28fa7ab1207
MD5 2afe40ce7e046fb1bb6120ba2d04a060
SHA1 c9dd55c8861486d4e5e931d05f87593dc55b51bd
SHA512 a729469e13f84bd1a2c1124c0886c9d0ba527aefc01e904beadfddc75654f0e912260041c3cdc468a8a24e340680d23949ccbcad5eee910c65c167281c138ad3
SSDEEP 1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8i:Olg35GTslA5t3/w8i
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

evasion persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2afe40ce7e046fb1bb6120ba2d04a060_NeikiAnalytics.exe

Resource

win7-20240221-en

windows7-x64

11 signatures

150 seconds

evasion persistence trojan

Behavioral task

behavioral2

Sample

2afe40ce7e046fb1bb6120ba2d04a060_NeikiAnalytics.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

10 signatures

150 seconds

evasion persistence trojan

Malware Config

Targets

- Target
  2afe40ce7e046fb1bb6120ba2d04a060_NeikiAnalytics.exe
- Size 70KB
- SHA256 9d59d04e6c49dfe73dc8238cd1a181e8903ed8bda16c7c00ba53e28fa7ab1207
- MD5 2afe40ce7e046fb1bb6120ba2d04a060
- SHA1 c9dd55c8861486d4e5e931d05f87593dc55b51bd
- SHA512 a729469e13f84bd1a2c1124c0886c9d0ba527aefc01e904beadfddc75654f0e912260041c3cdc468a8a24e340680d23949ccbcad5eee910c65c167281c138ad3
- SSDEEP 1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8i:Olg35GTslA5t3/w8i
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan

© 2018-2026

Terms | Privacy