8bd3be7bfc83e2b43de1b70e24c6c512dc1b955d4a355cb4fc4a2b11302bf100 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bd3be7bfc83e2b43de1b70e24c6c512dc1b955d4a355cb4fc4a2b11302bf100_NeikiAnalytics.exe
Size

45KB
Sample

240628-h4qhcszemj
MD5

fc945f97b92a29f1a9d737bd204bcbb0
SHA1

bd1bf1dda8a1f5f1f466dc70f59f95c3fb0a8a12
SHA256

8bd3be7bfc83e2b43de1b70e24c6c512dc1b955d4a355cb4fc4a2b11302bf100
SHA512

c59dc759bc5a74b3a1d50a16ba9b3e08afb83e851a9ec49c347d689a80cff043b05ed5ae6263978abdaeb11f7cbc5af7831c45919bf2288b51256d0c0be51de9
SSDEEP

768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iUA:8h7xsCKosi5pzjIcdRiTpqMGxs3w

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  8bd3be7bfc83e2b43de1b70e24c6c512dc1b955d4a355cb4fc4a2b11302bf100_NeikiAnalytics.exe
- Size
  
  45KB
- MD5
  
  fc945f97b92a29f1a9d737bd204bcbb0
- SHA1
  
  bd1bf1dda8a1f5f1f466dc70f59f95c3fb0a8a12
- SHA256
  
  8bd3be7bfc83e2b43de1b70e24c6c512dc1b955d4a355cb4fc4a2b11302bf100
- SHA512
  
  c59dc759bc5a74b3a1d50a16ba9b3e08afb83e851a9ec49c347d689a80cff043b05ed5ae6263978abdaeb11f7cbc5af7831c45919bf2288b51256d0c0be51de9
- SSDEEP
  
  768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iUA:8h7xsCKosi5pzjIcdRiTpqMGxs3w
Score

8^/10

persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2