1b978ef8ad4d61613db51f42be207363134ba0c39a43bdbaa0a69e6bc085bf0a | Triage

Sharing

General

Target

47b304bd12d44efe0a16cc5d6cec5e60_NeikiAnalytics.exe
Size

90KB
Sample

240605-hwwz6shh48
MD5

47b304bd12d44efe0a16cc5d6cec5e60
SHA1

615070f7de408b5bc2289a1523bb53726c1d89d5
SHA256

1b978ef8ad4d61613db51f42be207363134ba0c39a43bdbaa0a69e6bc085bf0a
SHA512

d2b2be8693a6d05e3c3966270598baece071c01ef4903d69cd1158e75d03f4401cdf24fab487f7b3912cea5817de0f67820b38226a62503e0d9fc6903769dbe8
SSDEEP

1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSIAJEYie+v1rio5dBvvv:5JjcF8KfCOcjk+guPVjSzmYie+voo53X

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  47b304bd12d44efe0a16cc5d6cec5e60_NeikiAnalytics.exe
- Size
  
  90KB
- MD5
  
  47b304bd12d44efe0a16cc5d6cec5e60
- SHA1
  
  615070f7de408b5bc2289a1523bb53726c1d89d5
- SHA256
  
  1b978ef8ad4d61613db51f42be207363134ba0c39a43bdbaa0a69e6bc085bf0a
- SHA512
  
  d2b2be8693a6d05e3c3966270598baece071c01ef4903d69cd1158e75d03f4401cdf24fab487f7b3912cea5817de0f67820b38226a62503e0d9fc6903769dbe8
- SSDEEP
  
  1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSIAJEYie+v1rio5dBvvv:5JjcF8KfCOcjk+guPVjSzmYie+voo53X
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2