General

  • Target

    4b2a85ae6673b0e4aaf4a0737d26dfa0_NeikiAnalytics.exe

  • Size

    84KB

  • Sample

    240529-jjfm4agb37

  • MD5

    4b2a85ae6673b0e4aaf4a0737d26dfa0

  • SHA1

    95173fbffcb81b19fee0e9a4a8a8eb7051eb0840

  • SHA256

    4979411bd311343c0212dfd2f57d8c402e280e43b1008714df6ecf1cc1e2028d

  • SHA512

    39564ba8c14141c52b8d2a3922e950e57cd20918c519e8d5e60ad48019bac1ba5ec912a9305267c8497d19a2068acbb4d00a8b46f54cd06fc0c4002f7c64cd42

  • SSDEEP

    1536:+azWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYYS7Q8x9:yFNpo6rIKlUE8fbkqRfbaQlaYYS9

Score
8/10

Malware Config

Targets

    • Target

      4b2a85ae6673b0e4aaf4a0737d26dfa0_NeikiAnalytics.exe

    • Size

      84KB

    • MD5

      4b2a85ae6673b0e4aaf4a0737d26dfa0

    • SHA1

      95173fbffcb81b19fee0e9a4a8a8eb7051eb0840

    • SHA256

      4979411bd311343c0212dfd2f57d8c402e280e43b1008714df6ecf1cc1e2028d

    • SHA512

      39564ba8c14141c52b8d2a3922e950e57cd20918c519e8d5e60ad48019bac1ba5ec912a9305267c8497d19a2068acbb4d00a8b46f54cd06fc0c4002f7c64cd42

    • SSDEEP

      1536:+azWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYYS7Q8x9:yFNpo6rIKlUE8fbkqRfbaQlaYYS9

    Score
    8/10
    • Downloads MZ/PE file

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Sets service image path in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks