General

  • Target

    3311584e6a9bb3ce1dc75c211f0841d9607d55eab4901a68254dfaf42d0b97b8_NeikiAnalytics.exe

  • Size

    402KB

  • Sample

    240701-ea8kasvgke

  • MD5

    46c14c106bd9819372167dfcca3e5180

  • SHA1

    cb4dde9cce3d88023e0ebb823ba95007d2ad423b

  • SHA256

    3311584e6a9bb3ce1dc75c211f0841d9607d55eab4901a68254dfaf42d0b97b8

  • SHA512

    2f58058d611e67ed0cab6b7726b106c4d7982443476da4a5c5ed43277ac820b26a2fd90766ae32ca80b0fb2f2a469b80cac5f956844e781c1cdc5b962b2c3720

  • SSDEEP

    6144:N2RVm0LPvTpN0xHuwdkAj51VezfHZ3neNZpGkXo+TCCYOs5PHdC:oRIoU

Score
10/10

Malware Config

Targets

    • Target

      3311584e6a9bb3ce1dc75c211f0841d9607d55eab4901a68254dfaf42d0b97b8_NeikiAnalytics.exe

    • Size

      402KB

    • MD5

      46c14c106bd9819372167dfcca3e5180

    • SHA1

      cb4dde9cce3d88023e0ebb823ba95007d2ad423b

    • SHA256

      3311584e6a9bb3ce1dc75c211f0841d9607d55eab4901a68254dfaf42d0b97b8

    • SHA512

      2f58058d611e67ed0cab6b7726b106c4d7982443476da4a5c5ed43277ac820b26a2fd90766ae32ca80b0fb2f2a469b80cac5f956844e781c1cdc5b962b2c3720

    • SSDEEP

      6144:N2RVm0LPvTpN0xHuwdkAj51VezfHZ3neNZpGkXo+TCCYOs5PHdC:oRIoU

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks