268b2fc75b188b4a1b7f42b519a424fe3dc376bd73712a9466ccc42f9234e3b7 | Triage

Sharing

General

Target

268b2fc75b188b4a1b7f42b519a424fe3dc376bd73712a9466ccc42f9234e3b7_NeikiAnalytics.exe
Size

347KB
Sample

240701-ancybszfrg
MD5

2abb65c3c0e5f053412b5f19e8080fc0
SHA1

314aa6cbcd1f6c468a625819d33120e0e1e6c7f5
SHA256

268b2fc75b188b4a1b7f42b519a424fe3dc376bd73712a9466ccc42f9234e3b7
SHA512

80412c160db3b40a65b4fcbbc90fe8febbd03e19f38acc46d727e7ca132c0fbdfdd60db796a8dea632e1d4ae40d92fc3a75704ecb3dbfea72d0c496baffa7465
SSDEEP

6144:k6M19H3uf7Sg5yx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:k6w2gx4brRGFB24lwR45FB24lEk

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  268b2fc75b188b4a1b7f42b519a424fe3dc376bd73712a9466ccc42f9234e3b7_NeikiAnalytics.exe
- Size
  
  347KB
- MD5
  
  2abb65c3c0e5f053412b5f19e8080fc0
- SHA1
  
  314aa6cbcd1f6c468a625819d33120e0e1e6c7f5
- SHA256
  
  268b2fc75b188b4a1b7f42b519a424fe3dc376bd73712a9466ccc42f9234e3b7
- SHA512
  
  80412c160db3b40a65b4fcbbc90fe8febbd03e19f38acc46d727e7ca132c0fbdfdd60db796a8dea632e1d4ae40d92fc3a75704ecb3dbfea72d0c496baffa7465
- SSDEEP
  
  6144:k6M19H3uf7Sg5yx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:k6w2gx4brRGFB24lwR45FB24lEk
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2