General

  • Target

    c713724e99e0004987b262edb0640750_NeikiAnalytics.exe

  • Size

    200KB

  • Sample

    240530-pb241she74

  • MD5

    c713724e99e0004987b262edb0640750

  • SHA1

    4488cbfe0aaf68b1c46d64e8efeb48b79e808d8c

  • SHA256

    ac85dc3241dd2ca083de43acfb7091e3702bc783acff5c9b211d6f4d9a1644f6

  • SHA512

    fe91e54e85fd3fc1b92c11f1a318b06422f308d8ee10366033d78c5cdec1c42e29d99e6404b0cab8d95582077293f78359231f6acac7cf4e1cb7b6408e51a060

  • SSDEEP

    3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uBL9is:7vEN2U+T6i5LirrllHy4HUcMQY6C9is

Score
10/10

Malware Config

Targets

    • Target

      c713724e99e0004987b262edb0640750_NeikiAnalytics.exe

    • Size

      200KB

    • MD5

      c713724e99e0004987b262edb0640750

    • SHA1

      4488cbfe0aaf68b1c46d64e8efeb48b79e808d8c

    • SHA256

      ac85dc3241dd2ca083de43acfb7091e3702bc783acff5c9b211d6f4d9a1644f6

    • SHA512

      fe91e54e85fd3fc1b92c11f1a318b06422f308d8ee10366033d78c5cdec1c42e29d99e6404b0cab8d95582077293f78359231f6acac7cf4e1cb7b6408e51a060

    • SSDEEP

      3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uBL9is:7vEN2U+T6i5LirrllHy4HUcMQY6C9is

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks