General

  • Target

    3324ab1f871c2e4155734ddc9650751663cc8a58e4d79129f769e4e9441770ba_NeikiAnalytics.exe

  • Size

    176KB

  • Sample

    240701-ebwxwsvglh

  • MD5

    41e4717e9b43c0c53ea6dd439b244760

  • SHA1

    a8ac116aeaa6bd0aaefa577372e8ed0ba455d4ee

  • SHA256

    3324ab1f871c2e4155734ddc9650751663cc8a58e4d79129f769e4e9441770ba

  • SHA512

    218c642db93a293c581ad0f0ae1190dd69e3571ce2acad80431da0cb4b9157afa65b0d6b76c442cee0c328bf41e9bafcfb8f8a79618b7d74b106acb07a6b9279

  • SSDEEP

    3072:yPNJCGUM2lCsz57arlOGA8d2E2fAYjmjRrz3E3:UNyQO57RXE2fAEG4

Score
10/10

Malware Config

Targets

    • Target

      3324ab1f871c2e4155734ddc9650751663cc8a58e4d79129f769e4e9441770ba_NeikiAnalytics.exe

    • Size

      176KB

    • MD5

      41e4717e9b43c0c53ea6dd439b244760

    • SHA1

      a8ac116aeaa6bd0aaefa577372e8ed0ba455d4ee

    • SHA256

      3324ab1f871c2e4155734ddc9650751663cc8a58e4d79129f769e4e9441770ba

    • SHA512

      218c642db93a293c581ad0f0ae1190dd69e3571ce2acad80431da0cb4b9157afa65b0d6b76c442cee0c328bf41e9bafcfb8f8a79618b7d74b106acb07a6b9279

    • SSDEEP

      3072:yPNJCGUM2lCsz57arlOGA8d2E2fAYjmjRrz3E3:UNyQO57RXE2fAEG4

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks