a2efc4a7c5c32253e49fca5ddfe653a1797b23c460872a4fb9a46819e4bec07e | Triage

Sharing

General

Target

9c7279b2edf49aa680802918de990940_NeikiAnalytics.exe
Size

80KB
Sample

240614-c99wassekh
MD5

9c7279b2edf49aa680802918de990940
SHA1

b36f218b53d5c935df1b8a772d0a76fd5c48ab21
SHA256

a2efc4a7c5c32253e49fca5ddfe653a1797b23c460872a4fb9a46819e4bec07e
SHA512

628e47663e9365047a5bb90699a4e9e6623f2de8a8db1adf0f6ae43b0b846443014b32d488f9ac64bd0a7748a26bcfa9d711b0d3c61d83c1bde7cecc77ed88b4
SSDEEP

1536:Ee10fipQ4LxRYkbh4e32T8nzzUcBYIEegggHv7NB2LUaIZTJ+7LhkiB0:Ee10fluPYkbB32gzzUcBYIEBxaUaMU7R

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  9c7279b2edf49aa680802918de990940_NeikiAnalytics.exe
- Size
  
  80KB
- MD5
  
  9c7279b2edf49aa680802918de990940
- SHA1
  
  b36f218b53d5c935df1b8a772d0a76fd5c48ab21
- SHA256
  
  a2efc4a7c5c32253e49fca5ddfe653a1797b23c460872a4fb9a46819e4bec07e
- SHA512
  
  628e47663e9365047a5bb90699a4e9e6623f2de8a8db1adf0f6ae43b0b846443014b32d488f9ac64bd0a7748a26bcfa9d711b0d3c61d83c1bde7cecc77ed88b4
- SSDEEP
  
  1536:Ee10fipQ4LxRYkbh4e32T8nzzUcBYIEegggHv7NB2LUaIZTJ+7LhkiB0:Ee10fluPYkbB32gzzUcBYIEBxaUaMU7R
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2