General
- Target 8c18a403b9c421c2766337291b207470_NeikiAnalytics.exe
- Size 65KB
- Sample240613-2cscessgjg
- SHA256 e8a18138bbf6382520c7f36a32c33d5f7a490041158b8f4984e50d0016af7f93
- MD5 8c18a403b9c421c2766337291b207470
- SHA1 7aa0f03b42d2e916509fca26c7b38bd505c03bdc
- SHA512 8433f0a6e1742c19de15d08d3333ca0691b9847e23e5e457c4b1c5952eb4c923ea0bb18356536ece42b154944e8a6bad6751a1dfe8684ab2400e66af8708cc38
- SSDEEP 1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/OuZ000000000000000000X:7WNqkOJWmo1HpM0MkTUmuF
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8c18a403b9c421c2766337291b207470_NeikiAnalytics.exe
Resource
win7-20240508-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
8c18a403b9c421c2766337291b207470_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 8c18a403b9c421c2766337291b207470_NeikiAnalytics.exe
- Size 65KB
- SHA256 e8a18138bbf6382520c7f36a32c33d5f7a490041158b8f4984e50d0016af7f93
- MD5 8c18a403b9c421c2766337291b207470
- SHA1 7aa0f03b42d2e916509fca26c7b38bd505c03bdc
- SHA512 8433f0a6e1742c19de15d08d3333ca0691b9847e23e5e457c4b1c5952eb4c923ea0bb18356536ece42b154944e8a6bad6751a1dfe8684ab2400e66af8708cc38
- SSDEEP 1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/OuZ000000000000000000X:7WNqkOJWmo1HpM0MkTUmuF
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1