6a67ccc27210b3c8f7da38980ba84354c98a091acfad0f1d5d95f4a41a56b342 | Triage

Sharing

General

Target

6a67ccc27210b3c8f7da38980ba84354c98a091acfad0f1d5d95f4a41a56b342_NeikiAnalytics.exe
Size

45KB
Sample

240628-c53leszbnk
MD5

c8a3b04070ff8613e8330d2907736410
SHA1

07f1dd3024bc0356fb46ba3260a238401e83a186
SHA256

6a67ccc27210b3c8f7da38980ba84354c98a091acfad0f1d5d95f4a41a56b342
SHA512

88ac33c8c3240c61bdf5f61708254aad2a36da1441c7f4e60ccef7b709a4bbdedcc065c9b3b48ef5b93643b4068bfcc87a85e4d887d8ad2df7cde5e7fb7e032c
SSDEEP

768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iUn:8h7xsCKosi5pzjIcdRiTpqMGxs3X

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  6a67ccc27210b3c8f7da38980ba84354c98a091acfad0f1d5d95f4a41a56b342_NeikiAnalytics.exe
- Size
  
  45KB
- MD5
  
  c8a3b04070ff8613e8330d2907736410
- SHA1
  
  07f1dd3024bc0356fb46ba3260a238401e83a186
- SHA256
  
  6a67ccc27210b3c8f7da38980ba84354c98a091acfad0f1d5d95f4a41a56b342
- SHA512
  
  88ac33c8c3240c61bdf5f61708254aad2a36da1441c7f4e60ccef7b709a4bbdedcc065c9b3b48ef5b93643b4068bfcc87a85e4d887d8ad2df7cde5e7fb7e032c
- SSDEEP
  
  768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iUn:8h7xsCKosi5pzjIcdRiTpqMGxs3X
Score

8^/10

persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2