General
- Target ae6ba67611ecc2c2a6dcf6aea1e6be40_NeikiAnalytics.exe
- Size 236KB
- Sample240614-jpb7vs1cle
- SHA256 a6e9a6566102b4a9713e9c1143f8bb042eab0ebbea87858fd83f852c656954d5
Score
10/10
Malware Config
Targets
-
- Target ae6ba67611ecc2c2a6dcf6aea1e6be40_NeikiAnalytics.exe
- Size 236KB
- SHA256 a6e9a6566102b4a9713e9c1143f8bb042eab0ebbea87858fd83f852c656954d5
Score10/10Modifies WinLogon for persistence
Modifies visibility of file extensions in Explorer
Modifies visiblity of hidden/system files in Explorer
UAC bypass
Disables RegEdit via registry modification
Disables use of System Restore points
Drops file in Drivers directory
Sets file execution options in registry
Executes dropped EXE
Loads dropped DLL
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
Adds Run key to start application
Checks whether UAC is enabled
Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
Drops file in System32 directory
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
9