General
-
Target
4bf917aabe6d5488411defae0ebf28e0_NeikiAnalytics.exe
-
Size
274KB
-
Sample
240605-kj2e8sbh34
-
MD5
4bf917aabe6d5488411defae0ebf28e0
-
SHA1
4d3f53805b46e3fea83c924264e733c41d0e75f9
-
SHA256
8a9ea014b45c6b85e465de1f6120932700031f03bf9a45504220839dfa4534e2
-
SHA512
f924be78cf218f4aa2a3fa95e1c2f4e47e61f420eaf2b87cbd5037314aa36e1e0824c1e468b99d9ffd42ccd1913aa04d1e8bec93b2827cc71a50551ed9450163
-
SSDEEP
6144:FvEN2U+T6i5LirrllHy4HUcMQY66bThVcHs:lENN+T5xYrllrU7QY68Thp
Static task
static1
Behavioral task
behavioral1
Sample
4bf917aabe6d5488411defae0ebf28e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4bf917aabe6d5488411defae0ebf28e0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
4bf917aabe6d5488411defae0ebf28e0_NeikiAnalytics.exe
-
Size
274KB
-
MD5
4bf917aabe6d5488411defae0ebf28e0
-
SHA1
4d3f53805b46e3fea83c924264e733c41d0e75f9
-
SHA256
8a9ea014b45c6b85e465de1f6120932700031f03bf9a45504220839dfa4534e2
-
SHA512
f924be78cf218f4aa2a3fa95e1c2f4e47e61f420eaf2b87cbd5037314aa36e1e0824c1e468b99d9ffd42ccd1913aa04d1e8bec93b2827cc71a50551ed9450163
-
SSDEEP
6144:FvEN2U+T6i5LirrllHy4HUcMQY66bThVcHs:lENN+T5xYrllrU7QY68Thp
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1