b1fc0e3b5fe6484985b78cd93d7424c375f5e210760182c6c0971b7cb763bc8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06b8bc69117c1776c98b14da0a894650_NeikiAnalytics.exe
Size

135KB
Sample

240527-whkxmsdd37
MD5

06b8bc69117c1776c98b14da0a894650
SHA1

fbeb617381d41f63f0b78b09d2b77de9350bc5c1
SHA256

b1fc0e3b5fe6484985b78cd93d7424c375f5e210760182c6c0971b7cb763bc8b
SHA512

d77162217f93b88ed3e3517b7367a17740ef021038cd93adfdec2bf55c7972dfa7f154170609fe73be7bf156c61042eb1ea95e7a816ff40cec3b47a1463e66b3
SSDEEP

1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbgtWd:XVqoCl/YgjxEufVU0TbTyDDalbd

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  06b8bc69117c1776c98b14da0a894650_NeikiAnalytics.exe
- Size
  
  135KB
- MD5
  
  06b8bc69117c1776c98b14da0a894650
- SHA1
  
  fbeb617381d41f63f0b78b09d2b77de9350bc5c1
- SHA256
  
  b1fc0e3b5fe6484985b78cd93d7424c375f5e210760182c6c0971b7cb763bc8b
- SHA512
  
  d77162217f93b88ed3e3517b7367a17740ef021038cd93adfdec2bf55c7972dfa7f154170609fe73be7bf156c61042eb1ea95e7a816ff40cec3b47a1463e66b3
- SSDEEP
  
  1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbgtWd:XVqoCl/YgjxEufVU0TbTyDDalbd
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence