Overview

overview

7

Static

static

3

6a20d05272...cs.exe

windows7-x64

7

6a20d05272...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a20d052725ed73d1c15779cadea75c0_NeikiAnalytics

  • Size

    51KB

  • Sample

    240509-sedglsfg5z

  • MD5

    6a20d052725ed73d1c15779cadea75c0

  • SHA1

    d49eb7a941070ee6ae05e5586cc9895d5fab05c5

  • SHA256

    c3baffd5d825ffff2c6c98fd85e46bc47008a77a14b90cdf6903d801beaed080

  • SHA512

    d6a6f0d30dc5bca75b996d5996a08e1d7edd1b3201721e425c151c372fe455aea6da8d61164e046b707614540f33f8504189bb6ba32aa7f12ed47abf3a123c7d

  • SSDEEP

    768:0M7kP0swFY6cPf/t+Vin9rOHialu0+qiWiSM81rVZVUCkzWdt8JE:0M4P0soYB/Iwn96H/unXjErZjdt8JE

Score
7/10

Malware Config

Targets

    • Target

      6a20d052725ed73d1c15779cadea75c0_NeikiAnalytics

    • Size

      51KB

    • MD5

      6a20d052725ed73d1c15779cadea75c0

    • SHA1

      d49eb7a941070ee6ae05e5586cc9895d5fab05c5

    • SHA256

      c3baffd5d825ffff2c6c98fd85e46bc47008a77a14b90cdf6903d801beaed080

    • SHA512

      d6a6f0d30dc5bca75b996d5996a08e1d7edd1b3201721e425c151c372fe455aea6da8d61164e046b707614540f33f8504189bb6ba32aa7f12ed47abf3a123c7d

    • SSDEEP

      768:0M7kP0swFY6cPf/t+Vin9rOHialu0+qiWiSM81rVZVUCkzWdt8JE:0M4P0soYB/Iwn96H/unXjErZjdt8JE

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks