Overview

overview

10

Static

static

7

7a74bf5f9b...cs.exe

windows7-x64

10

7a74bf5f9b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a74bf5f9be59465435ea6f234055210_NeikiAnalytics

  • Size

    22KB

  • Sample

    240510-fwqr2sch9y

  • MD5

    7a74bf5f9be59465435ea6f234055210

  • SHA1

    4646a083c977067a42f182ad3954ccb5944841d9

  • SHA256

    99ac66cff66282938d5a271102acfd9ce27a3a34bc589e97ab53343a43d93949

  • SHA512

    23f55e2b7a8af643a9bd1f3b0602dec4786aee1c4164d3b358f7b2fa4b9df5f01761b6ddec4635278546b05e545604cb7a7852f3185c560322f466557f8185b1

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a60:rRkiLw3HsDSARGG/MMb7r0

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      7a74bf5f9be59465435ea6f234055210_NeikiAnalytics

    • Size

      22KB

    • MD5

      7a74bf5f9be59465435ea6f234055210

    • SHA1

      4646a083c977067a42f182ad3954ccb5944841d9

    • SHA256

      99ac66cff66282938d5a271102acfd9ce27a3a34bc589e97ab53343a43d93949

    • SHA512

      23f55e2b7a8af643a9bd1f3b0602dec4786aee1c4164d3b358f7b2fa4b9df5f01761b6ddec4635278546b05e545604cb7a7852f3185c560322f466557f8185b1

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a60:rRkiLw3HsDSARGG/MMb7r0

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks