e01e4e16fef8d6a6557c157eaf7f18aa0bd2f2bfd518d6c587187d7487d31123 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d4a2e810a2c703e64a095b374171250_NeikiAnalytics.exe
Size

71KB
Sample

240612-3m33cavhjb
MD5

4d4a2e810a2c703e64a095b374171250
SHA1

b4bca76b314bb2d1f7673dfbf1f82fe2d50debd3
SHA256

e01e4e16fef8d6a6557c157eaf7f18aa0bd2f2bfd518d6c587187d7487d31123
SHA512

5112121420065869cb33925ce45e8156956b4c9b0722c1c80c3ece9511a350a836dc4394f6fed79364b5eb8e9f0a7ef47cc461c774b9eba6ec9f84640d8f54aa
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl3:Olg35GTslA5t3/w8u

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  4d4a2e810a2c703e64a095b374171250_NeikiAnalytics.exe
- Size
  
  71KB
- MD5
  
  4d4a2e810a2c703e64a095b374171250
- SHA1
  
  b4bca76b314bb2d1f7673dfbf1f82fe2d50debd3
- SHA256
  
  e01e4e16fef8d6a6557c157eaf7f18aa0bd2f2bfd518d6c587187d7487d31123
- SHA512
  
  5112121420065869cb33925ce45e8156956b4c9b0722c1c80c3ece9511a350a836dc4394f6fed79364b5eb8e9f0a7ef47cc461c774b9eba6ec9f84640d8f54aa
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl3:Olg35GTslA5t3/w8u
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan