3b7c8c7761d7470e3030a83893acbf0aa5461919ef8422e590ac6f1cd99b602b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f15d7c2b1018580fbaa2ab0c8709b40_NeikiAnalytics.exe
Size

73KB
Sample

240601-f3apeabc7z
MD5

8f15d7c2b1018580fbaa2ab0c8709b40
SHA1

a224a3ba3618e7f5bc71b49c03e9507d2002ac58
SHA256

3b7c8c7761d7470e3030a83893acbf0aa5461919ef8422e590ac6f1cd99b602b
SHA512

2cc8636879e3a53ae2290a2f6edd5112ebe421a81a3e2a1f54aae6346c20b37ca546f94f2b62e0fc2c0a1967c9d4ae3aa2aa0a773e918ea612d366f5809920ab
SSDEEP

1536:xJrcZa4V5fH01ZJdlUOIV3js6/XyMgjm6Ul0sYnLwDAc:j6RRH0IVweitm7lXYnEDAc

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8f15d7c2b1018580fbaa2ab0c8709b40_NeikiAnalytics.exe
- Size
  
  73KB
- MD5
  
  8f15d7c2b1018580fbaa2ab0c8709b40
- SHA1
  
  a224a3ba3618e7f5bc71b49c03e9507d2002ac58
- SHA256
  
  3b7c8c7761d7470e3030a83893acbf0aa5461919ef8422e590ac6f1cd99b602b
- SHA512
  
  2cc8636879e3a53ae2290a2f6edd5112ebe421a81a3e2a1f54aae6346c20b37ca546f94f2b62e0fc2c0a1967c9d4ae3aa2aa0a773e918ea612d366f5809920ab
- SSDEEP
  
  1536:xJrcZa4V5fH01ZJdlUOIV3js6/XyMgjm6Ul0sYnLwDAc:j6RRH0IVweitm7lXYnEDAc
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan