Overview

overview

10

Static

static

3

db9a1cd0da...cs.exe

windows7-x64

10

db9a1cd0da...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    db9a1cd0da10e7ea343944767219b330_NeikiAnalytics

  • Size

    80KB

  • Sample

    240509-ycpprabb9y

  • MD5

    db9a1cd0da10e7ea343944767219b330

  • SHA1

    e943b00179f32b4c8e0e38cca8fbcc430e52e988

  • SHA256

    9b9e04f7c3df2839aeafd3f4526599efe258a42552e7736193a832e41b5667ce

  • SHA512

    8d5db481243320990c027898189dd95122253e46e921b0109ba5583be4b640b4433b608b210f0679b84985d942ea521fa699002434195d0a3cedead86f8836f5

  • SSDEEP

    1536:kkvKq3IZUdeByFwgrGeJ2LbCYrum8SPG2:kem5/qGeCbVT8SL

Score
10/10
persistence

Malware Config

Targets

    • Target

      db9a1cd0da10e7ea343944767219b330_NeikiAnalytics

    • Size

      80KB

    • MD5

      db9a1cd0da10e7ea343944767219b330

    • SHA1

      e943b00179f32b4c8e0e38cca8fbcc430e52e988

    • SHA256

      9b9e04f7c3df2839aeafd3f4526599efe258a42552e7736193a832e41b5667ce

    • SHA512

      8d5db481243320990c027898189dd95122253e46e921b0109ba5583be4b640b4433b608b210f0679b84985d942ea521fa699002434195d0a3cedead86f8836f5

    • SSDEEP

      1536:kkvKq3IZUdeByFwgrGeJ2LbCYrum8SPG2:kem5/qGeCbVT8SL

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks