General
-
Target
9bd86e2dd8e9f1d92086aa7d380362b0_NeikiAnalytics.exe
-
Size
688KB
-
Sample
240530-qj1rlaba39
-
MD5
9bd86e2dd8e9f1d92086aa7d380362b0
-
SHA1
8087495cdd4a05b449cfaadc990391fb4d584e26
-
SHA256
4d8112b064124ec65ed7f804623ab68eadaff2e2f0b99375b86f397db741136c
-
SHA512
d0ca4b092fec27c638114185e129e16b7eabbc5f49ba0cb8e5f64d0a12790ad9a27e9c5dcb6be363412a049197ea839347bc1e46b270a745152017e1ce00d5f9
-
SSDEEP
12288:Ji4BFF7GknH3oPJ45shiHxUYM+p6LmiiwibVSsdc1TNcjmIujKZ:JHFF7GwshJYM06iaiIsdQTNciVKZ
Static task
static1
Behavioral task
behavioral1
Sample
9bd86e2dd8e9f1d92086aa7d380362b0_NeikiAnalytics.exe
Resource
win7-20240508-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
9bd86e2dd8e9f1d92086aa7d380362b0_NeikiAnalytics.exe
-
Size
688KB
-
MD5
9bd86e2dd8e9f1d92086aa7d380362b0
-
SHA1
8087495cdd4a05b449cfaadc990391fb4d584e26
-
SHA256
4d8112b064124ec65ed7f804623ab68eadaff2e2f0b99375b86f397db741136c
-
SHA512
d0ca4b092fec27c638114185e129e16b7eabbc5f49ba0cb8e5f64d0a12790ad9a27e9c5dcb6be363412a049197ea839347bc1e46b270a745152017e1ce00d5f9
-
SSDEEP
12288:Ji4BFF7GknH3oPJ45shiHxUYM+p6LmiiwibVSsdc1TNcjmIujKZ:JHFF7GwshJYM06iaiIsdQTNciVKZ
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1