72a7ebcbc44770f00ed369b6bcb3773a5a029371c4bd7eec0946fae3bded3c17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72a7ebcbc44770f00ed369b6bcb3773a5a029371c4bd7eec0946fae3bded3c17_NeikiAnalytics.exe
Size

45KB
Sample

240628-dsbgva1djp
MD5

c798be4803941501f6242c14eea3fb70
SHA1

49065962333388876ecba45c13b6f419f17b3b44
SHA256

72a7ebcbc44770f00ed369b6bcb3773a5a029371c4bd7eec0946fae3bded3c17
SHA512

cfd410b00508391241fdfe6bd02539923a66bf1be194abad30a1832fe8ec5b417e65c823f0a8fa757e18953b0a30604e98eea5b02c790a0420fad3719843466b
SSDEEP

768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iUi:8h7xsCKosi5pzjIcdRiTpqMGxs3y

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  72a7ebcbc44770f00ed369b6bcb3773a5a029371c4bd7eec0946fae3bded3c17_NeikiAnalytics.exe
- Size
  
  45KB
- MD5
  
  c798be4803941501f6242c14eea3fb70
- SHA1
  
  49065962333388876ecba45c13b6f419f17b3b44
- SHA256
  
  72a7ebcbc44770f00ed369b6bcb3773a5a029371c4bd7eec0946fae3bded3c17
- SHA512
  
  cfd410b00508391241fdfe6bd02539923a66bf1be194abad30a1832fe8ec5b417e65c823f0a8fa757e18953b0a30604e98eea5b02c790a0420fad3719843466b
- SSDEEP
  
  768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iUi:8h7xsCKosi5pzjIcdRiTpqMGxs3y
Score

8^/10

persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2