7f4f37216a55ae582a00ff6851663c0aa69fff08ec5665d56c4cc298e333bc0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51e6c3fdc261bf36f3f678df30e1e930_NeikiAnalytics.exe
Size

73KB
Sample

240529-mwlawsca41
MD5

51e6c3fdc261bf36f3f678df30e1e930
SHA1

790c7819bad059567f0d48bc267ec95b383f8bf4
SHA256

7f4f37216a55ae582a00ff6851663c0aa69fff08ec5665d56c4cc298e333bc0c
SHA512

10564bdc8d7c98ac193527d80d7f98df08c7185cf11cea5e388841d0e9f76308da49dab7e1f6508e73e91eceb9bdbd2ab84455ea1548dffb06ac9e7c9f768791
SSDEEP

1536:xyGioEFhlmSUO4tss7GwZyC2LcdtdoqDbAPfMzETC7fYJJgISHgzPZyd+P:p8VmSB4tss7GwZyC1NZO0zH2gBoZOs

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  51e6c3fdc261bf36f3f678df30e1e930_NeikiAnalytics.exe
- Size
  
  73KB
- MD5
  
  51e6c3fdc261bf36f3f678df30e1e930
- SHA1
  
  790c7819bad059567f0d48bc267ec95b383f8bf4
- SHA256
  
  7f4f37216a55ae582a00ff6851663c0aa69fff08ec5665d56c4cc298e333bc0c
- SHA512
  
  10564bdc8d7c98ac193527d80d7f98df08c7185cf11cea5e388841d0e9f76308da49dab7e1f6508e73e91eceb9bdbd2ab84455ea1548dffb06ac9e7c9f768791
- SSDEEP
  
  1536:xyGioEFhlmSUO4tss7GwZyC2LcdtdoqDbAPfMzETC7fYJJgISHgzPZyd+P:p8VmSB4tss7GwZyC1NZO0zH2gBoZOs
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan