General

  • Target

    9062aa9a06f1137ce39b6f7207b1c680_NeikiAnalytics.exe

  • Size

    480KB

  • Sample

    240601-gxmbpada58

  • MD5

    9062aa9a06f1137ce39b6f7207b1c680

  • SHA1

    e7478b1e0227a1fbeb171885fce176b484f1d1e1

  • SHA256

    02695917f9e6382b8a1b8d4297efc45cffaee30d0d2a7e241cbc46ef4923e239

  • SHA512

    edda30e65d82e69f0871fa8e087a448b3d92823b59d7d8d4424576b34b279da9e1121ed442709c64c4004859aeacbde8ec0a376bc4a069b6d077e3c1bbc320db

  • SSDEEP

    6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnV:nRDc3yWDNU+YUznzNjElWaT07NQtDV

Score
10/10

Malware Config

Targets

    • Target

      9062aa9a06f1137ce39b6f7207b1c680_NeikiAnalytics.exe

    • Size

      480KB

    • MD5

      9062aa9a06f1137ce39b6f7207b1c680

    • SHA1

      e7478b1e0227a1fbeb171885fce176b484f1d1e1

    • SHA256

      02695917f9e6382b8a1b8d4297efc45cffaee30d0d2a7e241cbc46ef4923e239

    • SHA512

      edda30e65d82e69f0871fa8e087a448b3d92823b59d7d8d4424576b34b279da9e1121ed442709c64c4004859aeacbde8ec0a376bc4a069b6d077e3c1bbc320db

    • SSDEEP

      6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnV:nRDc3yWDNU+YUznzNjElWaT07NQtDV

    Score
    10/10
    • Modifies firewall policy service

    • Adds policy Run key to start application

    • Sets service image path in registry

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks