Overview

overview

10

Static

static

3

690f4a25f7...cs.exe

windows7-x64

10

690f4a25f7...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    690f4a25f72e708fce90139131bd1830_NeikiAnalytics

  • Size

    352KB

  • Sample

    240510-esxwhsac8s

  • MD5

    690f4a25f72e708fce90139131bd1830

  • SHA1

    60b63e380e60c730466e94711611411c1362cc4a

  • SHA256

    8ffba10484aadebd19a4bdf00ac4f29187c02655d5e55e9cc2160e0c7d5a1fb6

  • SHA512

    c445652b30dbb8534a8287764375f867f44daa4324564c0e3fa268f49f97b9c520bdcb4882500558b5bb82e68e70f5af18e07b24e20f61d3b9c15549696d8fb1

  • SSDEEP

    1536:4RVVLz2cGCXKLAx4cd9Lv2PElgWdcNoN274B/K51ptaHElfTczp6Far2/AgAISF5:YLyCKUp+/NoN2N04A1oyD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      690f4a25f72e708fce90139131bd1830_NeikiAnalytics

    • Size

      352KB

    • MD5

      690f4a25f72e708fce90139131bd1830

    • SHA1

      60b63e380e60c730466e94711611411c1362cc4a

    • SHA256

      8ffba10484aadebd19a4bdf00ac4f29187c02655d5e55e9cc2160e0c7d5a1fb6

    • SHA512

      c445652b30dbb8534a8287764375f867f44daa4324564c0e3fa268f49f97b9c520bdcb4882500558b5bb82e68e70f5af18e07b24e20f61d3b9c15549696d8fb1

    • SSDEEP

      1536:4RVVLz2cGCXKLAx4cd9Lv2PElgWdcNoN274B/K51ptaHElfTczp6Far2/AgAISF5:YLyCKUp+/NoN2N04A1oyD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks