General
-
Target
b84f8eec9d828b1c304606283b1b6780_NeikiAnalytics.exe
-
Size
206KB
-
Sample
240530-n7zs4age4t
-
MD5
b84f8eec9d828b1c304606283b1b6780
-
SHA1
b75f676835bcc0e4a57e9106b6e1ca3bd4e563cd
-
SHA256
a1d32c90229df6538c4f71e2fe7939e56505f25f44c3b6e3f68c816aae8da13a
-
SHA512
d9a69ea00809b1ddef3eeb9dfb2e8edb6f4f4e15eb26641170cceff604a328bd1a892d1ae9ef057d3a8c95ca93b57506f1a69718e12d986c4a803e74fab37900
-
SSDEEP
3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unMO:5vEN2U+T6i5LirrllHy4HUcMQY6A
Static task
static1
Behavioral task
behavioral1
Sample
b84f8eec9d828b1c304606283b1b6780_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b84f8eec9d828b1c304606283b1b6780_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
b84f8eec9d828b1c304606283b1b6780_NeikiAnalytics.exe
-
Size
206KB
-
MD5
b84f8eec9d828b1c304606283b1b6780
-
SHA1
b75f676835bcc0e4a57e9106b6e1ca3bd4e563cd
-
SHA256
a1d32c90229df6538c4f71e2fe7939e56505f25f44c3b6e3f68c816aae8da13a
-
SHA512
d9a69ea00809b1ddef3eeb9dfb2e8edb6f4f4e15eb26641170cceff604a328bd1a892d1ae9ef057d3a8c95ca93b57506f1a69718e12d986c4a803e74fab37900
-
SSDEEP
3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unMO:5vEN2U+T6i5LirrllHy4HUcMQY6A
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1