ae99906d31e01eb7101a175b706cea87a00e62ee7547f916080c9efafc48d958 | Triage

Sharing

General

Target

ae99906d31e01eb7101a175b706cea87a00e62ee7547f916080c9efafc48d958_NeikiAnalytics.exe
Size

135KB
Sample

240629-rdkc4ayfra
MD5

14169dd9c539e2ea4b115e5009028830
SHA1

fbb10e26b81c90c7816ba68c55fba22f06a593d4
SHA256

ae99906d31e01eb7101a175b706cea87a00e62ee7547f916080c9efafc48d958
SHA512

c0d9dd58ec7004b784ba28df05e6cc4930694d5176c5c1ba17e44114dbf5c5b46b8d299223a844cc235eb5e968d77cb2232b3d3e7a777fc02fa86544ad1225e6
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVXr:UVqoCl/YgjxEufVU0TbTyDDalRr

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  ae99906d31e01eb7101a175b706cea87a00e62ee7547f916080c9efafc48d958_NeikiAnalytics.exe
- Size
  
  135KB
- MD5
  
  14169dd9c539e2ea4b115e5009028830
- SHA1
  
  fbb10e26b81c90c7816ba68c55fba22f06a593d4
- SHA256
  
  ae99906d31e01eb7101a175b706cea87a00e62ee7547f916080c9efafc48d958
- SHA512
  
  c0d9dd58ec7004b784ba28df05e6cc4930694d5176c5c1ba17e44114dbf5c5b46b8d299223a844cc235eb5e968d77cb2232b3d3e7a777fc02fa86544ad1225e6
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVXr:UVqoCl/YgjxEufVU0TbTyDDalRr
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence