ff41a7e468127c16c13b3a8e91e1bc21b63823d9c1f530f3ae36656056df3fe8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4874c5a7fb05f5ca837467dfa9c21bf0_NeikiAnalytics.exe
Size

73KB
Sample

240529-g5v9kaea67
MD5

4874c5a7fb05f5ca837467dfa9c21bf0
SHA1

83f4c1093f679b2da2630f4152a8b14110035213
SHA256

ff41a7e468127c16c13b3a8e91e1bc21b63823d9c1f530f3ae36656056df3fe8
SHA512

dce76c3841ddfb931dba6deeefd03b914e568bd73ccd978b8111cc1219057cbfea6acd6adf6c11bc8f005a60a4e356fac69f8884d4146b23722ca84dbf606acd
SSDEEP

1536:xp5uTRwOmEbRd3vHiIYTJWo9KxwO+N2tbZg0grsIhASwYZy:b5u1wOmqd3vHi8o9KiOAkg0gsIlZy

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  4874c5a7fb05f5ca837467dfa9c21bf0_NeikiAnalytics.exe
- Size
  
  73KB
- MD5
  
  4874c5a7fb05f5ca837467dfa9c21bf0
- SHA1
  
  83f4c1093f679b2da2630f4152a8b14110035213
- SHA256
  
  ff41a7e468127c16c13b3a8e91e1bc21b63823d9c1f530f3ae36656056df3fe8
- SHA512
  
  dce76c3841ddfb931dba6deeefd03b914e568bd73ccd978b8111cc1219057cbfea6acd6adf6c11bc8f005a60a4e356fac69f8884d4146b23722ca84dbf606acd
- SSDEEP
  
  1536:xp5uTRwOmEbRd3vHiIYTJWo9KxwO+N2tbZg0grsIhASwYZy:b5u1wOmqd3vHi8o9KiOAkg0gsIlZy
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan