Overview

overview

10

Static

static

3

ed9cf1eb7f...cs.exe

windows7-x64

10

ed9cf1eb7f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed9cf1eb7f886b58bef6123fc5c69910_NeikiAnalytics

  • Size

    124KB

  • Sample

    240509-y77ttach9x

  • MD5

    ed9cf1eb7f886b58bef6123fc5c69910

  • SHA1

    c3b9b12d7bbbdea2612ea951ad067da7e76366c3

  • SHA256

    e6ce6410e59f1caf39493627d0172910463c01562c2c5e7c0ad2426a18dd83e2

  • SHA512

    9094cbfb53a1e210f625534d14224d0cf991e78240e538077ef3e19d505623182c5703583cfe65d4caa982d43e9df7364fe243e48525ef2837fe019c473d5caa

  • SSDEEP

    1536:4IszA5YMshRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:LGCYMshkFoN3Oo1+FvfSW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ed9cf1eb7f886b58bef6123fc5c69910_NeikiAnalytics

    • Size

      124KB

    • MD5

      ed9cf1eb7f886b58bef6123fc5c69910

    • SHA1

      c3b9b12d7bbbdea2612ea951ad067da7e76366c3

    • SHA256

      e6ce6410e59f1caf39493627d0172910463c01562c2c5e7c0ad2426a18dd83e2

    • SHA512

      9094cbfb53a1e210f625534d14224d0cf991e78240e538077ef3e19d505623182c5703583cfe65d4caa982d43e9df7364fe243e48525ef2837fe019c473d5caa

    • SSDEEP

      1536:4IszA5YMshRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:LGCYMshkFoN3Oo1+FvfSW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks