Overview

overview

10

Static

static

7

c9ca777820...cs.exe

windows7-x64

10

c9ca777820...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9ca7778200458cdbe548473df28a840_NeikiAnalytics

  • Size

    63KB

  • Sample

    240509-xjp4eshf3x

  • MD5

    c9ca7778200458cdbe548473df28a840

  • SHA1

    ce06cb36c2e9c6e02e454b190b45ef8ad8a686d0

  • SHA256

    0ad3f781ceedd41773c137eae311590768b3d94ae1b334dd2a408bbc9f43e5fa

  • SHA512

    e6d5f1d4a3e396ab7993a89e0fc0c9efdab9b19b58526c13455aab04ea989bff400336f9a2b3097755db64976d2f053f49f507cfde13930f3ec62389804f0f44

  • SSDEEP

    768:rAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGKQLddOW/24Wvph7:sUNHFKQbIkHvGMdOp4U

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      c9ca7778200458cdbe548473df28a840_NeikiAnalytics

    • Size

      63KB

    • MD5

      c9ca7778200458cdbe548473df28a840

    • SHA1

      ce06cb36c2e9c6e02e454b190b45ef8ad8a686d0

    • SHA256

      0ad3f781ceedd41773c137eae311590768b3d94ae1b334dd2a408bbc9f43e5fa

    • SHA512

      e6d5f1d4a3e396ab7993a89e0fc0c9efdab9b19b58526c13455aab04ea989bff400336f9a2b3097755db64976d2f053f49f507cfde13930f3ec62389804f0f44

    • SSDEEP

      768:rAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGKQLddOW/24Wvph7:sUNHFKQbIkHvGMdOp4U

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks