6d5abd36597b0f4087fb2a2ad05b510d382f0d5ffbad808e2bdc3d48028e83bd | Triage

Sharing

General

Target

6d5abd36597b0f4087fb2a2ad05b510d382f0d5ffbad808e2bdc3d48028e83bd_NeikiAnalytics.exe
Size

256KB
Sample

240629-f9r72asbjh
MD5

ff05dbc087b0d31c3d49f3260d7b3370
SHA1

fc52a8691deea1a40cd9f98779b713ec3686bdb1
SHA256

6d5abd36597b0f4087fb2a2ad05b510d382f0d5ffbad808e2bdc3d48028e83bd
SHA512

be46fa7a61019c6f1950f1782d35a61826c69d38cd01251d77e6d48ea28febd707f24a47c6dd051b8d4f203e0abc1defdf7eb4584ec7c8c3a227452f4fd651d5
SSDEEP

6144:MMEv5VVUwGqov/STYaT15f7o+STYaT15fAK8yL:a13oCTYapJoTYapz8yL

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  6d5abd36597b0f4087fb2a2ad05b510d382f0d5ffbad808e2bdc3d48028e83bd_NeikiAnalytics.exe
- Size
  
  256KB
- MD5
  
  ff05dbc087b0d31c3d49f3260d7b3370
- SHA1
  
  fc52a8691deea1a40cd9f98779b713ec3686bdb1
- SHA256
  
  6d5abd36597b0f4087fb2a2ad05b510d382f0d5ffbad808e2bdc3d48028e83bd
- SHA512
  
  be46fa7a61019c6f1950f1782d35a61826c69d38cd01251d77e6d48ea28febd707f24a47c6dd051b8d4f203e0abc1defdf7eb4584ec7c8c3a227452f4fd651d5
- SSDEEP
  
  6144:MMEv5VVUwGqov/STYaT15f7o+STYaT15fAK8yL:a13oCTYapJoTYapz8yL
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2