General
- Target 91f06becca1f76b9dbe84494b7337740_NeikiAnalytics.exe
- Size 91KB
- Sample240601-hwjpvaeb86
- SHA256 e414b39cd0f04e4c33e67002571d29ff6d3f983b249c54059533fe8802486ad0
- MD5 91f06becca1f76b9dbe84494b7337740
- SHA1 a6953d41318970400fbe7132337f274d0b4b3784
- SHA512 808d7c9abe999220321d57e9e7048f89802aff854f3202ecaae91294c2525d789f2e1a27c94e0ee0f8582524df85c587a4b7724698a2c15f5beca9f1c5b7d3fb
- SSDEEP 1536:zAwEmBZ04faWmtN4nic+6GdAwEmBZ04faWmtN4nic+6GU:zGms4Eton0dGms4Eton0U
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
91f06becca1f76b9dbe84494b7337740_NeikiAnalytics.exe
Resource
win7-20231129-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
91f06becca1f76b9dbe84494b7337740_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 91f06becca1f76b9dbe84494b7337740_NeikiAnalytics.exe
- Size 91KB
- SHA256 e414b39cd0f04e4c33e67002571d29ff6d3f983b249c54059533fe8802486ad0
- MD5 91f06becca1f76b9dbe84494b7337740
- SHA1 a6953d41318970400fbe7132337f274d0b4b3784
- SHA512 808d7c9abe999220321d57e9e7048f89802aff854f3202ecaae91294c2525d789f2e1a27c94e0ee0f8582524df85c587a4b7724698a2c15f5beca9f1c5b7d3fb
- SSDEEP 1536:zAwEmBZ04faWmtN4nic+6GdAwEmBZ04faWmtN4nic+6GU:zGms4Eton0dGms4Eton0U
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Disables RegEdit via registry modification
-
Disables use of System Restore points
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1