General
-
Target
3e1d7032238e66b098deb7871ef4a140_NeikiAnalytics.exe
-
Size
480KB
-
Sample
240602-f1s3zacc7y
-
MD5
3e1d7032238e66b098deb7871ef4a140
-
SHA1
de18b971bced013386a6cf2e5cfa1c6d517fef40
-
SHA256
f476b03167f5971d6733c7c75374b8549f1744e121f18a9496e1634948508946
-
SHA512
7a61691faa6239b6705218192e69e18cc08131e4342cea92aa1bb2a9abdda1c0e6ed1e6249570e2422f3491c3ca5033e8a561668ffa698759a2f851b07a97359
-
SSDEEP
6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnO:nRDc3yWDNU+YUznzNjElWaT07NQtDO
Static task
static1
Behavioral task
behavioral1
Sample
3e1d7032238e66b098deb7871ef4a140_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3e1d7032238e66b098deb7871ef4a140_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
3e1d7032238e66b098deb7871ef4a140_NeikiAnalytics.exe
-
Size
480KB
-
MD5
3e1d7032238e66b098deb7871ef4a140
-
SHA1
de18b971bced013386a6cf2e5cfa1c6d517fef40
-
SHA256
f476b03167f5971d6733c7c75374b8549f1744e121f18a9496e1634948508946
-
SHA512
7a61691faa6239b6705218192e69e18cc08131e4342cea92aa1bb2a9abdda1c0e6ed1e6249570e2422f3491c3ca5033e8a561668ffa698759a2f851b07a97359
-
SSDEEP
6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnO:nRDc3yWDNU+YUznzNjElWaT07NQtDO
Score10/10-
Modifies firewall policy service
-
Adds policy Run key to start application
-
Sets service image path in registry
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
3Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
3Create or Modify System Process
1Windows Service
1