Overview

overview

8

Static

static

7

7d1da043f7...cs.exe

windows7-x64

8

7d1da043f7...cs.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    7d1da043f71de8d035331ae6bed38200_NeikiAnalytics

  • Size

    3.7MB

  • Sample

    240510-f317csgg76

  • MD5

    7d1da043f71de8d035331ae6bed38200

  • SHA1

    ed355675b7020a78c8ef35dab5f33baae9e3ca10

  • SHA256

    32f37f1164a0f1526427cfea6f624ea258ae5727763faaad65d3123558910f91

  • SHA512

    a986e6559038c1b71e04eb0e846d6d91f5a714cf613f00fd6be54cc3287921a8afda556434da2eecd0f96a771db070cd121f8520b28731a11f83d65fe5af8175

  • SSDEEP

    98304:y3rWjizNfd71aofFsZJzHBKCVKpah3+R1icFW9w1/eNJ4CZ:yWji9iTBKpT1icFb/egCZ

Score
8/10
persistencevmprotect

Malware Config

Targets

    • Target

      7d1da043f71de8d035331ae6bed38200_NeikiAnalytics

    • Size

      3.7MB

    • MD5

      7d1da043f71de8d035331ae6bed38200

    • SHA1

      ed355675b7020a78c8ef35dab5f33baae9e3ca10

    • SHA256

      32f37f1164a0f1526427cfea6f624ea258ae5727763faaad65d3123558910f91

    • SHA512

      a986e6559038c1b71e04eb0e846d6d91f5a714cf613f00fd6be54cc3287921a8afda556434da2eecd0f96a771db070cd121f8520b28731a11f83d65fe5af8175

    • SSDEEP

      98304:y3rWjizNfd71aofFsZJzHBKCVKpah3+R1icFW9w1/eNJ4CZ:yWji9iTBKpT1icFb/egCZ

    Score
    8/10
    persistencevmprotect

    • Modifies AppInit DLL entries

      persistence

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks