486c11ba08571935b0256c90ccb614eb5b710c66acf3f23a3d9899dc99c90a84 | Triage

Sharing

General

Target

410d155fb2f894b4e3e62cf1bf75d120_NeikiAnalytics.exe
Size

32KB
Sample

240612-y4kj4syeja
MD5

410d155fb2f894b4e3e62cf1bf75d120
SHA1

531530c91bf624a12bfda4b080cb2d8bba2a8af4
SHA256

486c11ba08571935b0256c90ccb614eb5b710c66acf3f23a3d9899dc99c90a84
SHA512

b14eb0e0b46a77d56841d0895340f64cc6281924331ec75c362ec104456a98a7ea524d97d2311abee733be9389212d3a407f90b429abc26c0ad4dbb9587899c9
SSDEEP

384:ttpw9lRPwz2jSUpInHDzcNIpBKywTDwMGWYccF3BoJzEY+tHVkw3ccNwifGIyLs2:tPw9lRPwzpjbvwTDwMh+Uw3ccrfLPPr

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  410d155fb2f894b4e3e62cf1bf75d120_NeikiAnalytics.exe
- Size
  
  32KB
- MD5
  
  410d155fb2f894b4e3e62cf1bf75d120
- SHA1
  
  531530c91bf624a12bfda4b080cb2d8bba2a8af4
- SHA256
  
  486c11ba08571935b0256c90ccb614eb5b710c66acf3f23a3d9899dc99c90a84
- SHA512
  
  b14eb0e0b46a77d56841d0895340f64cc6281924331ec75c362ec104456a98a7ea524d97d2311abee733be9389212d3a407f90b429abc26c0ad4dbb9587899c9
- SSDEEP
  
  384:ttpw9lRPwz2jSUpInHDzcNIpBKywTDwMGWYccF3BoJzEY+tHVkw3ccNwifGIyLs2:tPw9lRPwzpjbvwTDwMh+Uw3ccrfLPPr
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence