d2a9653945c1dd33216bff91abd25fc283dba44c255fb8553cf8dfa610651881 | Triage

Sharing

General

Target

182f4f574884cc8ac9e65df305822660NeikiAnalytics.exe
Size

72KB
Sample

240527-y8n34aab86
MD5

182f4f574884cc8ac9e65df305822660
SHA1

4b6a571a8cb575175bbdcbebd22b03ddef26f680
SHA256

d2a9653945c1dd33216bff91abd25fc283dba44c255fb8553cf8dfa610651881
SHA512

9ede47059ca0e09ef07ea53878bdc9adc5b21edb84ffd8e533aba9a5c09e2ecf1920c4bc403a63e040291f236306c4c3434fb1944ca47e3d097378010b9f96f7
SSDEEP

1536:xbmCbyQvM4jA0oMYGy59Y7aSaT0BlOExfxIvkcyDR6ftBOK3z:YFQtjiM051j4BlOSfK1cyz

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  182f4f574884cc8ac9e65df305822660NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  182f4f574884cc8ac9e65df305822660
- SHA1
  
  4b6a571a8cb575175bbdcbebd22b03ddef26f680
- SHA256
  
  d2a9653945c1dd33216bff91abd25fc283dba44c255fb8553cf8dfa610651881
- SHA512
  
  9ede47059ca0e09ef07ea53878bdc9adc5b21edb84ffd8e533aba9a5c09e2ecf1920c4bc403a63e040291f236306c4c3434fb1944ca47e3d097378010b9f96f7
- SSDEEP
  
  1536:xbmCbyQvM4jA0oMYGy59Y7aSaT0BlOExfxIvkcyDR6ftBOK3z:YFQtjiM051j4BlOSfK1cyz
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan