General

  • Target

    98fa22cc1aba5b59af0ba4cbf89557f0_NeikiAnalytics.exe

  • Size

    163KB

  • Sample

    240603-denj9agg5v

  • MD5

    98fa22cc1aba5b59af0ba4cbf89557f0

  • SHA1

    ba213cf24f41f145ab410c549ef1cf4ef3a09b63

  • SHA256

    0d91d31b890d7e6e5680e16b267232bbb376ca7af3162c80506b349a7cce1507

  • SHA512

    194fc8d53b69822ae6c2c9b6b061516a0fdb723ee8644f3e874808de4f8d49f22c3cc7d86cb878ca340367720b853bcc9b9d16b4bd51252a0a95b04e91b8e3a1

  • SSDEEP

    3072:vx6AHjYzaFXg+w17jsgS/jHagQg19Vlnhfxu:vxzYzaFXi17jklh

Malware Config

Targets

    • Target

      98fa22cc1aba5b59af0ba4cbf89557f0_NeikiAnalytics.exe

    • Size

      163KB

    • MD5

      98fa22cc1aba5b59af0ba4cbf89557f0

    • SHA1

      ba213cf24f41f145ab410c549ef1cf4ef3a09b63

    • SHA256

      0d91d31b890d7e6e5680e16b267232bbb376ca7af3162c80506b349a7cce1507

    • SHA512

      194fc8d53b69822ae6c2c9b6b061516a0fdb723ee8644f3e874808de4f8d49f22c3cc7d86cb878ca340367720b853bcc9b9d16b4bd51252a0a95b04e91b8e3a1

    • SSDEEP

      3072:vx6AHjYzaFXg+w17jsgS/jHagQg19Vlnhfxu:vxzYzaFXi17jklh

    • Modifies WinLogon for persistence

    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • UAC bypass

    • Disables RegEdit via registry modification

    • Disables use of System Restore points

    • Drops file in Drivers directory

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks