718edadf628523090f5fb21f256ce552b48a5048ba0611e766dc0fe407e76e84 | Triage

Sharing

General

Target

718edadf628523090f5fb21f256ce552b48a5048ba0611e766dc0fe407e76e84_NeikiAnalytics.exe
Size

380KB
Sample

240629-grepnavgrk
MD5

656e9cf70c85c52aa0fc83e734d9d3b0
SHA1

9ae0e509b49ada86dff8906f74fb3ece8e46c01a
SHA256

718edadf628523090f5fb21f256ce552b48a5048ba0611e766dc0fe407e76e84
SHA512

ee95888365ba15fd9b53ad64caaaf1623f5f300f7fea5036e42e13c38f669fa41c1b0d32f0c69ba4ef4598c2389af6852cca6374056c82545538006f5ccb395c
SSDEEP

6144:lBPQ5fcQP/t6n3lDygbawy72JDy/ya9cLHFlb0mVrWSHIf5Zvu:lacQP/YxyG7yKvLHFGm8mIfzm

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  718edadf628523090f5fb21f256ce552b48a5048ba0611e766dc0fe407e76e84_NeikiAnalytics.exe
- Size
  
  380KB
- MD5
  
  656e9cf70c85c52aa0fc83e734d9d3b0
- SHA1
  
  9ae0e509b49ada86dff8906f74fb3ece8e46c01a
- SHA256
  
  718edadf628523090f5fb21f256ce552b48a5048ba0611e766dc0fe407e76e84
- SHA512
  
  ee95888365ba15fd9b53ad64caaaf1623f5f300f7fea5036e42e13c38f669fa41c1b0d32f0c69ba4ef4598c2389af6852cca6374056c82545538006f5ccb395c
- SSDEEP
  
  6144:lBPQ5fcQP/t6n3lDygbawy72JDy/ya9cLHFlb0mVrWSHIf5Zvu:lacQP/YxyG7yKvLHFGm8mIfzm
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2