78f8397a38bb4ef5007927f9015dcd19a8acab2bd5742a2a4458ff0add75f521 | Triage

Sharing

General

Target

78f8397a38bb4ef5007927f9015dcd19a8acab2bd5742a2a4458ff0add75f521_NeikiAnalytics.exe
Size

206KB
Sample

240629-hhgnbssgjc
MD5

bd9465ce9e026855ed67abb9f6283c60
SHA1

fdcdfe22350cba98351c747fcc8396c55a54f960
SHA256

78f8397a38bb4ef5007927f9015dcd19a8acab2bd5742a2a4458ff0add75f521
SHA512

3f0262ef7bbc3f639d5c20b7d12493a737c358d99079d0adc50088bb3f7d2ab219477d726868205d7996a783a4b29571a7ac6675f3b274d0d1fc828a3f6e5910
SSDEEP

6144:iu6ABIdHMnMMYGlPtFYmeiGLaMt8ApYUBvNdP4y2:iuLIHMhPtFvei8aM2Aa8N+y2

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  78f8397a38bb4ef5007927f9015dcd19a8acab2bd5742a2a4458ff0add75f521_NeikiAnalytics.exe
- Size
  
  206KB
- MD5
  
  bd9465ce9e026855ed67abb9f6283c60
- SHA1
  
  fdcdfe22350cba98351c747fcc8396c55a54f960
- SHA256
  
  78f8397a38bb4ef5007927f9015dcd19a8acab2bd5742a2a4458ff0add75f521
- SHA512
  
  3f0262ef7bbc3f639d5c20b7d12493a737c358d99079d0adc50088bb3f7d2ab219477d726868205d7996a783a4b29571a7ac6675f3b274d0d1fc828a3f6e5910
- SSDEEP
  
  6144:iu6ABIdHMnMMYGlPtFYmeiGLaMt8ApYUBvNdP4y2:iuLIHMhPtFvei8aM2Aa8N+y2
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2