328de58451baf80175055e5d666ef9e4ed02fcfda3ee986fe2a64f0e9692bda6 | Triage

Sharing

General

Target

328de58451baf80175055e5d666ef9e4ed02fcfda3ee986fe2a64f0e9692bda6_NeikiAnalytics.exe
Size

89KB
Sample

240701-d5sa5avepe
MD5

afa19dc9d2dd99e2f4029c369b89fdb0
SHA1

ea6e36b1438653a4c30ccb055ffb11cd1e52178a
SHA256

328de58451baf80175055e5d666ef9e4ed02fcfda3ee986fe2a64f0e9692bda6
SHA512

21f94806d82ec4b06fc98f1da56308f3ecc94c706ed3978ca51f007fe822a4d576b35cb1089645e615e9cdd2e486130e77a4df038ffadebb899d131c5d1f77d7
SSDEEP

768:Qvw9816vhKQLrot4/wQRNrfrunMxVFA3b7glL:YEGh0otl2unMxVS3Hg9

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  328de58451baf80175055e5d666ef9e4ed02fcfda3ee986fe2a64f0e9692bda6_NeikiAnalytics.exe
- Size
  
  89KB
- MD5
  
  afa19dc9d2dd99e2f4029c369b89fdb0
- SHA1
  
  ea6e36b1438653a4c30ccb055ffb11cd1e52178a
- SHA256
  
  328de58451baf80175055e5d666ef9e4ed02fcfda3ee986fe2a64f0e9692bda6
- SHA512
  
  21f94806d82ec4b06fc98f1da56308f3ecc94c706ed3978ca51f007fe822a4d576b35cb1089645e615e9cdd2e486130e77a4df038ffadebb899d131c5d1f77d7
- SSDEEP
  
  768:Qvw9816vhKQLrot4/wQRNrfrunMxVFA3b7glL:YEGh0otl2unMxVS3Hg9
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2