General

  • Target

    8e4ff8d247570196d1002cb14cfe3200_NeikiAnalytics.exe

  • Size

    66KB

  • Sample

    240613-2zy4gsxhln

  • MD5

    8e4ff8d247570196d1002cb14cfe3200

  • SHA1

    6dfc902074ed1dbc66f3de46dee6ab0373a87c6a

  • SHA256

    d5cef33b3503ae6e229979c5b412cf159af907e61bb77de1c21d36605ad12e9f

  • SHA512

    6054e2a0d89910f4a3d659388367cac6718b75741066634ae3a974973514eaf2f3e48fb7d188364dc0969a9997458959df259b12d208cf70aaa10a68a3159adc

  • SSDEEP

    1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXis:IeklMMYJhqezw/pXzH9is

Score
10/10

Malware Config

Targets

    • Target

      8e4ff8d247570196d1002cb14cfe3200_NeikiAnalytics.exe

    • Size

      66KB

    • MD5

      8e4ff8d247570196d1002cb14cfe3200

    • SHA1

      6dfc902074ed1dbc66f3de46dee6ab0373a87c6a

    • SHA256

      d5cef33b3503ae6e229979c5b412cf159af907e61bb77de1c21d36605ad12e9f

    • SHA512

      6054e2a0d89910f4a3d659388367cac6718b75741066634ae3a974973514eaf2f3e48fb7d188364dc0969a9997458959df259b12d208cf70aaa10a68a3159adc

    • SSDEEP

      1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXis:IeklMMYJhqezw/pXzH9is

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Defense Evasion

Modify Registry

4
T1112

Hide Artifacts

1
T1564

Hidden Files and Directories

1
T1564.001

Discovery

System Information Discovery

1
T1082

Tasks