General
-
Target
a94486b3e452fcf5a416fe831f9a05a28e9e45c74c468dc772926d1d20cdc910_NeikiAnalytics.exe
-
Size
3.6MB
-
Sample
240629-nb8q5awfjc
-
MD5
e9eafe5eca1d19f887b36542f4803d00
-
SHA1
9fd9bee8ee535554c026ddf51244fc62fbfd202a
-
SHA256
a94486b3e452fcf5a416fe831f9a05a28e9e45c74c468dc772926d1d20cdc910
-
SHA512
c30bd247376291934dbc35b98df31e348474fc80191d442ad75369a2d78cbed2b8104dd3af8ae89da4817b829625d93ede9171fab5df6fb8824d6f0589935777
-
SSDEEP
98304:cQqb79f6Xgrstmcs8FQyUGs2z048C32t7QoXyO:UBVr/wFhUGsu048Cmt5r
Static task
static1
Behavioral task
behavioral1
Sample
a94486b3e452fcf5a416fe831f9a05a28e9e45c74c468dc772926d1d20cdc910_NeikiAnalytics.exe
Resource
win7-20240611-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
a94486b3e452fcf5a416fe831f9a05a28e9e45c74c468dc772926d1d20cdc910_NeikiAnalytics.exe
-
Size
3.6MB
-
MD5
e9eafe5eca1d19f887b36542f4803d00
-
SHA1
9fd9bee8ee535554c026ddf51244fc62fbfd202a
-
SHA256
a94486b3e452fcf5a416fe831f9a05a28e9e45c74c468dc772926d1d20cdc910
-
SHA512
c30bd247376291934dbc35b98df31e348474fc80191d442ad75369a2d78cbed2b8104dd3af8ae89da4817b829625d93ede9171fab5df6fb8824d6f0589935777
-
SSDEEP
98304:cQqb79f6Xgrstmcs8FQyUGs2z048C32t7QoXyO:UBVr/wFhUGsu048Cmt5r
-
Modifies firewall policy service
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
5Impair Defenses
4Disable or Modify Tools
3Disable or Modify System Firewall
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1