General
-
Target
596906331dd02681bfa4e48f84b0f000_NeikiAnalytics.exe
-
Size
65KB
-
Sample
240613-dkx1wawbll
-
MD5
596906331dd02681bfa4e48f84b0f000
-
SHA1
e31881102fe199060e80fe9e9dde0b88870455b3
-
SHA256
21b1e575e95fd79a7ef76ba1defcd4e2dad10da3892b5f8d668778132640a23d
-
SHA512
0981ed3e44b9c1033b1be3bc100f69c035178df246ba23cecfda0170aea76ab69e60538dc947e5adf618857be29062f45a7b6f668c25ab90b4ffda14ba1ad6cb
-
SSDEEP
1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/OuYAAAAAAAAAAAAAAAAAAp:7WNqkOJWmo1HpM0MkTUmuYAAAAAAAAAE
Static task
static1
Behavioral task
behavioral1
Sample
596906331dd02681bfa4e48f84b0f000_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
596906331dd02681bfa4e48f84b0f000_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
596906331dd02681bfa4e48f84b0f000_NeikiAnalytics.exe
-
Size
65KB
-
MD5
596906331dd02681bfa4e48f84b0f000
-
SHA1
e31881102fe199060e80fe9e9dde0b88870455b3
-
SHA256
21b1e575e95fd79a7ef76ba1defcd4e2dad10da3892b5f8d668778132640a23d
-
SHA512
0981ed3e44b9c1033b1be3bc100f69c035178df246ba23cecfda0170aea76ab69e60538dc947e5adf618857be29062f45a7b6f668c25ab90b4ffda14ba1ad6cb
-
SSDEEP
1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/OuYAAAAAAAAAAAAAAAAAAp:7WNqkOJWmo1HpM0MkTUmuYAAAAAAAAAE
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1