Overview

overview

7

Static

static

7

2e11a93fbf...cs.exe

windows7-x64

7

2e11a93fbf...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e11a93fbf915029942e85730db414f0_NeikiAnalytics

  • Size

    23KB

  • Sample

    240510-avhgdsgb9t

  • MD5

    2e11a93fbf915029942e85730db414f0

  • SHA1

    4154c9a51e82825f49a51a31f851969e245a081b

  • SHA256

    bf883a0d37d1dc23f924f50ce06a545d2271ed05b98c4ffcbf2febd96ba629bb

  • SHA512

    133d6dd93fdc1976dfd83c99283c639e4886271d21abd6ab1087e565264487cbc3c32f5996b74e872e1fe26f076a46c7a2ce05389a8006978da97fba0b845580

  • SSDEEP

    384:aGpN5/SfmVoonJWpSu+Ip7JLyaBOEj63eVi06MCL31:fhZSoEpnp7JLyWWElhCZ

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2e11a93fbf915029942e85730db414f0_NeikiAnalytics

    • Size

      23KB

    • MD5

      2e11a93fbf915029942e85730db414f0

    • SHA1

      4154c9a51e82825f49a51a31f851969e245a081b

    • SHA256

      bf883a0d37d1dc23f924f50ce06a545d2271ed05b98c4ffcbf2febd96ba629bb

    • SHA512

      133d6dd93fdc1976dfd83c99283c639e4886271d21abd6ab1087e565264487cbc3c32f5996b74e872e1fe26f076a46c7a2ce05389a8006978da97fba0b845580

    • SSDEEP

      384:aGpN5/SfmVoonJWpSu+Ip7JLyaBOEj63eVi06MCL31:fhZSoEpnp7JLyWWElhCZ

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks