37b558d88547695e54f053aa371293b9129439f7f1e6809de8fe72f376060112 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b558d88547695e54f053aa371293b9129439f7f1e6809de8fe72f376060112_NeikiAnalytics.exe
Size

2.3MB
Sample

240701-fth97azhnp
MD5

fda473b93e68bb0d88f202d2e24c97f0
SHA1

b1ac5541c2ad5dcb3c5974de94b816cdd179f33d
SHA256

37b558d88547695e54f053aa371293b9129439f7f1e6809de8fe72f376060112
SHA512

10af8f25943124984bbae40803cb6d93cbd64fcaa8168b789a4f244822bfdd3ac11366029b130f9f8e3784002181e4af2cd1bec2a6fb083ba4a676f0a24b9000
SSDEEP

49152:TQ+TOYoN4QuXnABq7YKxiTA+tPt4BG6LuFqbLyrh+yRuo:TNyYoWLfcKiPiGzf

Score

8^/10

evasion execution persistence

Malware Config

Targets

- Target
  
  37b558d88547695e54f053aa371293b9129439f7f1e6809de8fe72f376060112_NeikiAnalytics.exe
- Size
  
  2.3MB
- MD5
  
  fda473b93e68bb0d88f202d2e24c97f0
- SHA1
  
  b1ac5541c2ad5dcb3c5974de94b816cdd179f33d
- SHA256
  
  37b558d88547695e54f053aa371293b9129439f7f1e6809de8fe72f376060112
- SHA512
  
  10af8f25943124984bbae40803cb6d93cbd64fcaa8168b789a4f244822bfdd3ac11366029b130f9f8e3784002181e4af2cd1bec2a6fb083ba4a676f0a24b9000
- SSDEEP
  
  49152:TQ+TOYoN4QuXnABq7YKxiTA+tPt4BG6LuFqbLyrh+yRuo:TNyYoWLfcKiPiGzf
Score

8^/10

evasion execution persistence
- Stops running service(s)
  evasion execution
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecutionpersistence

behavioral2