49ff9d53a798c36bdc34c13bab7ef793febe7336626653b2e4adf8eacfe550a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ff9d53a798c36bdc34c13bab7ef793febe7336626653b2e4adf8eacfe550a1_NeikiAnalytics.exe
Size

90KB
Sample

240625-ksjxjsshpp
MD5

6f37a87b612fc6a8f99d71525dcc4510
SHA1

e1e2bc68d468f04e9d145ccbb410733c3ecc5ca1
SHA256

49ff9d53a798c36bdc34c13bab7ef793febe7336626653b2e4adf8eacfe550a1
SHA512

21f2e2f6be267055789c0d1b67e5a8214911babdd5e7ecc2c01911b1ec0c873a708f1983659dffe9da9b34775dd0e58c5b2e1bb8f3d6a54ccb12b7a907cf1233
SSDEEP

768:Qvw9816vhKQLro34/wQRNrfrunMxVFA3b7glw:YEGh0o3l2unMxVS3Hg

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  49ff9d53a798c36bdc34c13bab7ef793febe7336626653b2e4adf8eacfe550a1_NeikiAnalytics.exe
- Size
  
  90KB
- MD5
  
  6f37a87b612fc6a8f99d71525dcc4510
- SHA1
  
  e1e2bc68d468f04e9d145ccbb410733c3ecc5ca1
- SHA256
  
  49ff9d53a798c36bdc34c13bab7ef793febe7336626653b2e4adf8eacfe550a1
- SHA512
  
  21f2e2f6be267055789c0d1b67e5a8214911babdd5e7ecc2c01911b1ec0c873a708f1983659dffe9da9b34775dd0e58c5b2e1bb8f3d6a54ccb12b7a907cf1233
- SSDEEP
  
  768:Qvw9816vhKQLro34/wQRNrfrunMxVFA3b7glw:YEGh0o3l2unMxVS3Hg
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2