be5c9e1264557416dbb3798b0eedadc788d9e38051d6a4e3ed1608e4bf37091f | Triage

Sharing

General

Target

2df08c42536e383faacf3f0f29fe14e0_NeikiAnalytics.exe
Size

73KB
Sample

240607-ca78esgg83
MD5

2df08c42536e383faacf3f0f29fe14e0
SHA1

c60edd15c7b38afc58b9f0f423fffed42fcca515
SHA256

be5c9e1264557416dbb3798b0eedadc788d9e38051d6a4e3ed1608e4bf37091f
SHA512

d28dca496e9c7f419423a87166893dee67cd5670141305f7e606042b037291aee836e29161487a0e7fc7d9195775ee8cbc66e451c6e80304024856c48cc5442e
SSDEEP

768:x/nbDcnZARkcr07JP9Xdg7SV5bWNy1IMakG98N+hayyyOHoW5iKTNGNXft9RxVH7:xDDcIJ0JlXuGEUaWMnHcJOVkOF

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  2df08c42536e383faacf3f0f29fe14e0_NeikiAnalytics.exe
- Size
  
  73KB
- MD5
  
  2df08c42536e383faacf3f0f29fe14e0
- SHA1
  
  c60edd15c7b38afc58b9f0f423fffed42fcca515
- SHA256
  
  be5c9e1264557416dbb3798b0eedadc788d9e38051d6a4e3ed1608e4bf37091f
- SHA512
  
  d28dca496e9c7f419423a87166893dee67cd5670141305f7e606042b037291aee836e29161487a0e7fc7d9195775ee8cbc66e451c6e80304024856c48cc5442e
- SSDEEP
  
  768:x/nbDcnZARkcr07JP9Xdg7SV5bWNy1IMakG98N+hayyyOHoW5iKTNGNXft9RxVH7:xDDcIJ0JlXuGEUaWMnHcJOVkOF
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan