General

  • Target

    d343682dfdd961ff1b929e42ddfa3810_NeikiAnalytics.exe

  • Size

    218KB

  • Sample

    240530-redxpscc32

  • MD5

    d343682dfdd961ff1b929e42ddfa3810

  • SHA1

    557d7c35f3953b4beb335646d341b4cda72ae58c

  • SHA256

    ac51ebf2d73f00e7f713dda5fa3093610b8bb19d5d972d5077cfd9d5db50430c

  • SHA512

    0425811b1446e19c1c5f92f53b129be0826516aaf206908ead3ebd2fe03f497338b111d15d6b68c17508ff9456b5ca4548fd973fe511f314eee54d2c438c2dc7

  • SSDEEP

    3072:bvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:j1SyAJp6rjn1gOObn4b6h9h

Score
10/10

Malware Config

Targets

    • Target

      d343682dfdd961ff1b929e42ddfa3810_NeikiAnalytics.exe

    • Size

      218KB

    • MD5

      d343682dfdd961ff1b929e42ddfa3810

    • SHA1

      557d7c35f3953b4beb335646d341b4cda72ae58c

    • SHA256

      ac51ebf2d73f00e7f713dda5fa3093610b8bb19d5d972d5077cfd9d5db50430c

    • SHA512

      0425811b1446e19c1c5f92f53b129be0826516aaf206908ead3ebd2fe03f497338b111d15d6b68c17508ff9456b5ca4548fd973fe511f314eee54d2c438c2dc7

    • SSDEEP

      3072:bvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:j1SyAJp6rjn1gOObn4b6h9h

    Score
    10/10
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

MITRE ATT&CK Enterprise v15

Tasks