3713babf5fbbbcf85cf64d29a097708bfe1ad471409f5d0ec914884be402df86 | Triage

Sharing

General

Target

3713babf5fbbbcf85cf64d29a097708bfe1ad471409f5d0ec914884be402df86_NeikiAnalytics.exe
Size

1.2MB
Sample

240701-flqpaszfpp
MD5

559c43b38eb9cda558975284c08e6380
SHA1

8a23f1f8148e4b9cc9c20b3be56b39e9b0dab5ed
SHA256

3713babf5fbbbcf85cf64d29a097708bfe1ad471409f5d0ec914884be402df86
SHA512

5171bb84e6301c2977262d5bf105abeea1b18be911ccfd956c4863c586d2399f697dd5b7e1f15756179c813adf40cd326a300f3b7f3390af0959ebe63f7ba703
SSDEEP

12288:JE6N7PFEDWJihVbjnEPBgQVl4lPaH8dn/StuEm2XwZyAopv+4Apovq/:JE27PFEUQU6l4yn/StM2WfC+4Apiq/

Score

5^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  3713babf5fbbbcf85cf64d29a097708bfe1ad471409f5d0ec914884be402df86_NeikiAnalytics.exe
- Size
  
  1.2MB
- MD5
  
  559c43b38eb9cda558975284c08e6380
- SHA1
  
  8a23f1f8148e4b9cc9c20b3be56b39e9b0dab5ed
- SHA256
  
  3713babf5fbbbcf85cf64d29a097708bfe1ad471409f5d0ec914884be402df86
- SHA512
  
  5171bb84e6301c2977262d5bf105abeea1b18be911ccfd956c4863c586d2399f697dd5b7e1f15756179c813adf40cd326a300f3b7f3390af0959ebe63f7ba703
- SSDEEP
  
  12288:JE6N7PFEDWJihVbjnEPBgQVl4lPaH8dn/StuEm2XwZyAopv+4Apovq/:JE27PFEUQU6l4yn/StM2WfC+4Apiq/
Score

5^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

persistenceprivilege_escalation