General

  • Target

    1cb353712e8725025f4c82eb873f15b0_NeikiAnalytics.exe

  • Size

    64KB

  • Sample

    240602-bxs7caeh59

  • MD5

    1cb353712e8725025f4c82eb873f15b0

  • SHA1

    01b492111b4636acf3c2057f84d7e63837971375

  • SHA256

    b7b55d0e064c74a62ecbed762a73ee3274e941338369b1c46235292948d143e6

  • SHA512

    fa59d8e1eb0889a65b4af26ea1ca488626ce76f699440488913f98fb4530a26aa64b47f95ab0baaea8a82b262f62ca2d1d70ab974749236bf7f892ae691a2900

  • SSDEEP

    768:rAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGKQLddOW/24WvgMb7r1:sUNHFKQbIkHvGMdOp4Zu7h

Malware Config

Targets

    • Target

      1cb353712e8725025f4c82eb873f15b0_NeikiAnalytics.exe

    • Size

      64KB

    • MD5

      1cb353712e8725025f4c82eb873f15b0

    • SHA1

      01b492111b4636acf3c2057f84d7e63837971375

    • SHA256

      b7b55d0e064c74a62ecbed762a73ee3274e941338369b1c46235292948d143e6

    • SHA512

      fa59d8e1eb0889a65b4af26ea1ca488626ce76f699440488913f98fb4530a26aa64b47f95ab0baaea8a82b262f62ca2d1d70ab974749236bf7f892ae691a2900

    • SSDEEP

      768:rAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGKQLddOW/24WvgMb7r1:sUNHFKQbIkHvGMdOp4Zu7h

    • Windows security bypass

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Windows security modification

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks