Overview

overview

10

Static

static

3

878cdfd2d5...cs.exe

windows7-x64

10

878cdfd2d5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    878cdfd2d50d4b94c2ad869269905d10_NeikiAnalytics

  • Size

    260KB

  • Sample

    240510-gqtgesac77

  • MD5

    878cdfd2d50d4b94c2ad869269905d10

  • SHA1

    04c9759326c01838b2892aea62d6ea746dfdfc43

  • SHA256

    5ff0a7eff8544802188a772a72f3f2c61f59e822c96b65c1d81b0b2db16a28bd

  • SHA512

    67042c72a568cf8bc8fdef27c167d339602210255708006e00ec469301f33d29c011bdfb880ae8b5c7c7912223288590b9e0af7e6b3bad5e0a1dcee19a7edc51

  • SSDEEP

    3072:AygCullUQN7gsBh1L1gygCullUQN7gsBh1L1V:ARleK771qRleK771/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      878cdfd2d50d4b94c2ad869269905d10_NeikiAnalytics

    • Size

      260KB

    • MD5

      878cdfd2d50d4b94c2ad869269905d10

    • SHA1

      04c9759326c01838b2892aea62d6ea746dfdfc43

    • SHA256

      5ff0a7eff8544802188a772a72f3f2c61f59e822c96b65c1d81b0b2db16a28bd

    • SHA512

      67042c72a568cf8bc8fdef27c167d339602210255708006e00ec469301f33d29c011bdfb880ae8b5c7c7912223288590b9e0af7e6b3bad5e0a1dcee19a7edc51

    • SSDEEP

      3072:AygCullUQN7gsBh1L1gygCullUQN7gsBh1L1V:ARleK771qRleK771/

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks