779380b0ed70c538d1260597473aa15e73d741675ff1f94e37a9ce1152d741c8 | Triage

Sharing

General

Target

8ce265b58b913bf2a718cd36cb8b8560_NeikiAnalytics.exe
Size

72KB
Sample

240601-epk3jsaa26
MD5

8ce265b58b913bf2a718cd36cb8b8560
SHA1

d71ffd77303f83d2cfef89b8778dc4893ada03fc
SHA256

779380b0ed70c538d1260597473aa15e73d741675ff1f94e37a9ce1152d741c8
SHA512

96d174dd7ecde61b5a61465368b208812e75cbc98ff6799f2743382ccaac20d868c0506cc5d9c5cf427ad4c07d6960fbac1cdf716a3d59205f2006ea8b6343af
SSDEEP

1536:xBoj3/OgHIerbSSuf9c/buo4iiugZb6hCPmXeu0XyxsdvDKcY3:noDvHDrbTuf9abJiugV6hyu0XyxsdvD2

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8ce265b58b913bf2a718cd36cb8b8560_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  8ce265b58b913bf2a718cd36cb8b8560
- SHA1
  
  d71ffd77303f83d2cfef89b8778dc4893ada03fc
- SHA256
  
  779380b0ed70c538d1260597473aa15e73d741675ff1f94e37a9ce1152d741c8
- SHA512
  
  96d174dd7ecde61b5a61465368b208812e75cbc98ff6799f2743382ccaac20d868c0506cc5d9c5cf427ad4c07d6960fbac1cdf716a3d59205f2006ea8b6343af
- SSDEEP
  
  1536:xBoj3/OgHIerbSSuf9c/buo4iiugZb6hCPmXeu0XyxsdvDKcY3:noDvHDrbTuf9abJiugV6hyu0XyxsdvD2
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan