Overview

overview

10

Static

static

3

6712c29fb8...cs.exe

windows7-x64

10

6712c29fb8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6712c29fb855d0d81d6ae13d742b9e90_NeikiAnalytics

  • Size

    308KB

  • Sample

    240510-engnqsdb84

  • MD5

    6712c29fb855d0d81d6ae13d742b9e90

  • SHA1

    391ef6930fdb29a1e224c4e9aa8dfac8452e3d6e

  • SHA256

    b87fe6776c9b2ef2afa62c40c2962e4f6cb81c4b3829fd5928f53f5fceb73d59

  • SHA512

    3e533ff17823b621d4484ee2c774479ff08a23f2b8678dcc98e6e618796a515f8d5166c3a8496d211f9b6a8a63fee6f128692528f3f777491321af6e6c20c1a2

  • SSDEEP

    3072:3X2ctgeeHKTMc8SmaS+n6LQfrREHAShClmyikCUWDuP7w9Z0P97HpRXpXJF:3RSemfepfFEHF8zw0P97H7Xl

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6712c29fb855d0d81d6ae13d742b9e90_NeikiAnalytics

    • Size

      308KB

    • MD5

      6712c29fb855d0d81d6ae13d742b9e90

    • SHA1

      391ef6930fdb29a1e224c4e9aa8dfac8452e3d6e

    • SHA256

      b87fe6776c9b2ef2afa62c40c2962e4f6cb81c4b3829fd5928f53f5fceb73d59

    • SHA512

      3e533ff17823b621d4484ee2c774479ff08a23f2b8678dcc98e6e618796a515f8d5166c3a8496d211f9b6a8a63fee6f128692528f3f777491321af6e6c20c1a2

    • SSDEEP

      3072:3X2ctgeeHKTMc8SmaS+n6LQfrREHAShClmyikCUWDuP7w9Z0P97HpRXpXJF:3RSemfepfFEHF8zw0P97H7Xl

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks