General
-
Target
412018f17ea7f1e5a7336e64288549dcef2be8567022543ab0dd757fabfa2d21_NeikiAnalytics.exe
-
Size
120KB
-
Sample
240626-dhdt8a1clb
-
MD5
a42fb3d7967a90e8a6172c65052acb20
-
SHA1
78c63a8792ba465dea0d8d849ad8f5e605922c46
-
SHA256
412018f17ea7f1e5a7336e64288549dcef2be8567022543ab0dd757fabfa2d21
-
SHA512
a9cae428f7e98161dcf6274a323d96e1b9354c678b4979ec71eb22a1d690c98bc9ea2c7000e15ad401589e3e5b67ef30e67f72831239aeddf2baa362bdc14670
-
SSDEEP
1536:znDmBlV+5b8LK6zLiroFfwbCLOeqYEcXMP/HO4ptiOFyj88XC2pAFKRpR8vL1j:cj+yW0LnLpq7cXMnO4ptrFncROL
Static task
static1
Behavioral task
behavioral1
Sample
412018f17ea7f1e5a7336e64288549dcef2be8567022543ab0dd757fabfa2d21_NeikiAnalytics.dll
Resource
win7-20240508-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
412018f17ea7f1e5a7336e64288549dcef2be8567022543ab0dd757fabfa2d21_NeikiAnalytics.exe
-
Size
120KB
-
MD5
a42fb3d7967a90e8a6172c65052acb20
-
SHA1
78c63a8792ba465dea0d8d849ad8f5e605922c46
-
SHA256
412018f17ea7f1e5a7336e64288549dcef2be8567022543ab0dd757fabfa2d21
-
SHA512
a9cae428f7e98161dcf6274a323d96e1b9354c678b4979ec71eb22a1d690c98bc9ea2c7000e15ad401589e3e5b67ef30e67f72831239aeddf2baa362bdc14670
-
SSDEEP
1536:znDmBlV+5b8LK6zLiroFfwbCLOeqYEcXMP/HO4ptiOFyj88XC2pAFKRpR8vL1j:cj+yW0LnLpq7cXMnO4ptrFncROL
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5