828b263a52658caa5b86f247a30fbc2ae4c1251bf94a07929b06e4d78111dbda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e161cda525ab3e71cd785fdba3afc10_NeikiAnalytics.exe
Size

135KB
Sample

240616-3nf9zaxhjp
MD5

1e161cda525ab3e71cd785fdba3afc10
SHA1

910a350609d1de9de2041e4230231aea514ba21d
SHA256

828b263a52658caa5b86f247a30fbc2ae4c1251bf94a07929b06e4d78111dbda
SHA512

edcbc3e953ca7a8bf0c2d70645f4db25e6bd17c4d69c0bc0ca37260e89f2b14b780b9df8fb2750ac1fe0843d34fd8c502d4f9802264afc46bea726131b4b8820
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVgyk:UVqoCl/YgjxEufVU0TbTyDDalayk

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  1e161cda525ab3e71cd785fdba3afc10_NeikiAnalytics.exe
- Size
  
  135KB
- MD5
  
  1e161cda525ab3e71cd785fdba3afc10
- SHA1
  
  910a350609d1de9de2041e4230231aea514ba21d
- SHA256
  
  828b263a52658caa5b86f247a30fbc2ae4c1251bf94a07929b06e4d78111dbda
- SHA512
  
  edcbc3e953ca7a8bf0c2d70645f4db25e6bd17c4d69c0bc0ca37260e89f2b14b780b9df8fb2750ac1fe0843d34fd8c502d4f9802264afc46bea726131b4b8820
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVgyk:UVqoCl/YgjxEufVU0TbTyDDalayk
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence