32dd4926fe903f2d34daab54e27906c8756ec3f6b3edcd0ff14f19532589ab18 | Triage

Sharing

General

Target

32dd4926fe903f2d34daab54e27906c8756ec3f6b3edcd0ff14f19532589ab18_NeikiAnalytics.exe
Size

84KB
Sample

240701-d9hbqavfpc
MD5

c52d2028d81f20311ad86ba327724490
SHA1

6875df3a7f355d831e82a2d0475dd73aa503f6b0
SHA256

32dd4926fe903f2d34daab54e27906c8756ec3f6b3edcd0ff14f19532589ab18
SHA512

24a281772fe9941ba194efe1efc7237d55f148df2327c6971d259b18088074a8c6c09374b4a25da60de3e01d198492549b065454e8d10e15d923db7b00537ce6
SSDEEP

1536:lBYL8mIvuYwmPt1opqIrYfLqT2VS41QgfpxF1QJ9z8:lBk8mIvuEPGb02TaQgvQ0

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  32dd4926fe903f2d34daab54e27906c8756ec3f6b3edcd0ff14f19532589ab18_NeikiAnalytics.exe
- Size
  
  84KB
- MD5
  
  c52d2028d81f20311ad86ba327724490
- SHA1
  
  6875df3a7f355d831e82a2d0475dd73aa503f6b0
- SHA256
  
  32dd4926fe903f2d34daab54e27906c8756ec3f6b3edcd0ff14f19532589ab18
- SHA512
  
  24a281772fe9941ba194efe1efc7237d55f148df2327c6971d259b18088074a8c6c09374b4a25da60de3e01d198492549b065454e8d10e15d923db7b00537ce6
- SSDEEP
  
  1536:lBYL8mIvuYwmPt1opqIrYfLqT2VS41QgfpxF1QJ9z8:lBk8mIvuEPGb02TaQgvQ0
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2