General

  • Target

    3e1d7032238e66b098deb7871ef4a140_NeikiAnalytics.exe

  • Size

    480KB

  • Sample

    240602-f1s3zacc7y

  • MD5

    3e1d7032238e66b098deb7871ef4a140

  • SHA1

    de18b971bced013386a6cf2e5cfa1c6d517fef40

  • SHA256

    f476b03167f5971d6733c7c75374b8549f1744e121f18a9496e1634948508946

  • SHA512

    7a61691faa6239b6705218192e69e18cc08131e4342cea92aa1bb2a9abdda1c0e6ed1e6249570e2422f3491c3ca5033e8a561668ffa698759a2f851b07a97359

  • SSDEEP

    6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnO:nRDc3yWDNU+YUznzNjElWaT07NQtDO

Score
10/10

Malware Config

Targets

    • Target

      3e1d7032238e66b098deb7871ef4a140_NeikiAnalytics.exe

    • Size

      480KB

    • MD5

      3e1d7032238e66b098deb7871ef4a140

    • SHA1

      de18b971bced013386a6cf2e5cfa1c6d517fef40

    • SHA256

      f476b03167f5971d6733c7c75374b8549f1744e121f18a9496e1634948508946

    • SHA512

      7a61691faa6239b6705218192e69e18cc08131e4342cea92aa1bb2a9abdda1c0e6ed1e6249570e2422f3491c3ca5033e8a561668ffa698759a2f851b07a97359

    • SSDEEP

      6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnO:nRDc3yWDNU+YUznzNjElWaT07NQtDO

    Score
    10/10
    • Modifies firewall policy service

    • Adds policy Run key to start application

    • Sets service image path in registry

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks