Overview

overview

10

Static

static

3

85e3c66edc...cs.exe

windows7-x64

10

85e3c66edc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85e3c66edc63b7c513d7f6c7eede6670_NeikiAnalytics

  • Size

    44KB

  • Sample

    240509-tqrn2sdh64

  • MD5

    85e3c66edc63b7c513d7f6c7eede6670

  • SHA1

    c5e0bc65c8f03d7c3bca7eab73c7bd5c1e62c520

  • SHA256

    74253a048bc323d16b2264cd296dd934c94d7859b730b2fcfd04f6635403a1fd

  • SHA512

    5f9100552e7fb6dd8a69c75bca0ff712136f15cc2745e07c5166e86a7aaacc53aaad580b193d1a9e7d2339ff26afd99c844fe3f8b21ea20e2069dc3c15600d70

  • SSDEEP

    768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQvr9Vu18yb:RUNHFKQbIkHvGkA65q

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      85e3c66edc63b7c513d7f6c7eede6670_NeikiAnalytics

    • Size

      44KB

    • MD5

      85e3c66edc63b7c513d7f6c7eede6670

    • SHA1

      c5e0bc65c8f03d7c3bca7eab73c7bd5c1e62c520

    • SHA256

      74253a048bc323d16b2264cd296dd934c94d7859b730b2fcfd04f6635403a1fd

    • SHA512

      5f9100552e7fb6dd8a69c75bca0ff712136f15cc2745e07c5166e86a7aaacc53aaad580b193d1a9e7d2339ff26afd99c844fe3f8b21ea20e2069dc3c15600d70

    • SSDEEP

      768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQvr9Vu18yb:RUNHFKQbIkHvGkA65q

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks