General
-
Target
9f453be8703edaeecdb056cb60f15510_NeikiAnalytics.exe
-
Size
211KB
-
Sample
240603-hl8k8afc9s
-
MD5
9f453be8703edaeecdb056cb60f15510
-
SHA1
3bc41acac939b422ebfd502872e60e72b78f94af
-
SHA256
1e772d4df1a80c1169957d6e072085b5ef3e870eb1350084afbb8f974800cc28
-
SHA512
f53752bc399d04089a815ca1c13bc2398802ee47e90fb48df1c1afd67ea30e301a91950c96c55c8243d0fb28301c6df36e57ea60faa23701895074000b7bf3a9
-
SSDEEP
3072:WD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOm:Wh8cBzHLRMpZ4d1Zm
Static task
static1
Behavioral task
behavioral1
Sample
9f453be8703edaeecdb056cb60f15510_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f453be8703edaeecdb056cb60f15510_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
9f453be8703edaeecdb056cb60f15510_NeikiAnalytics.exe
-
Size
211KB
-
MD5
9f453be8703edaeecdb056cb60f15510
-
SHA1
3bc41acac939b422ebfd502872e60e72b78f94af
-
SHA256
1e772d4df1a80c1169957d6e072085b5ef3e870eb1350084afbb8f974800cc28
-
SHA512
f53752bc399d04089a815ca1c13bc2398802ee47e90fb48df1c1afd67ea30e301a91950c96c55c8243d0fb28301c6df36e57ea60faa23701895074000b7bf3a9
-
SSDEEP
3072:WD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOm:Wh8cBzHLRMpZ4d1Zm
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1