ab874beb65d3b8e73738b800c00c8095bc1cc85f08697f08390632c27500f3dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f7487bdebd83d45e1430c6b48b31250_NeikiAnalytics.exe
Size

72KB
Sample

240527-fbtm7sge2x
MD5

1f7487bdebd83d45e1430c6b48b31250
SHA1

b70e0271b69ea0a1647a6eea1c696f44d0a3d258
SHA256

ab874beb65d3b8e73738b800c00c8095bc1cc85f08697f08390632c27500f3dd
SHA512

c4393c5185e189221b8b23cecfa6e4f913d8a1f36a0f499c82dace29c95edbf9d972da936ce649915d0388a62458f1057d3fccce3d1de698fa7ad4e1ade7f57d
SSDEEP

768:x/nEuhThEUAvMgvvd9WhTOng8X6m2AYS1rg1YJZLIgwRdPxCdYLndQxzGp5hhJy+:xs0evMm+tgg1XS181xbGgdjhh9ZoPbK

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  1f7487bdebd83d45e1430c6b48b31250_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  1f7487bdebd83d45e1430c6b48b31250
- SHA1
  
  b70e0271b69ea0a1647a6eea1c696f44d0a3d258
- SHA256
  
  ab874beb65d3b8e73738b800c00c8095bc1cc85f08697f08390632c27500f3dd
- SHA512
  
  c4393c5185e189221b8b23cecfa6e4f913d8a1f36a0f499c82dace29c95edbf9d972da936ce649915d0388a62458f1057d3fccce3d1de698fa7ad4e1ade7f57d
- SSDEEP
  
  768:x/nEuhThEUAvMgvvd9WhTOng8X6m2AYS1rg1YJZLIgwRdPxCdYLndQxzGp5hhJy+:xs0evMm+tgg1XS181xbGgdjhh9ZoPbK
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan