Overview

overview

10

Static

static

3

a04a490b2a...cs.exe

windows7-x64

10

a04a490b2a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a04a490b2a1c8cbfa2a2bd238800eca0_NeikiAnalytics

  • Size

    128KB

  • Sample

    240510-h847bade59

  • MD5

    a04a490b2a1c8cbfa2a2bd238800eca0

  • SHA1

    0ac7418bd48bcfa90c0271db4f22ebb16aa20c11

  • SHA256

    3edd371bdd930daf351b9ab3b6e3d519d41dfc6e44b18868f13076407425975d

  • SHA512

    1147b19d5600058509f35af910629936f59d0764842da9a80bb6a5ae0141858e0b532a8516e5b5242519f21b31ac46e885bc8f7e0633c01122aae5c5103f5610

  • SSDEEP

    3072:jSRhypzuj/34Ok1CHjMQH2qC7ZQOlzSLUK6MwGsGnDc9nhViX:jSyxus1CHjMQWfdQOhwJ6MwGsy

Score
10/10
persistence

Malware Config

Targets

    • Target

      a04a490b2a1c8cbfa2a2bd238800eca0_NeikiAnalytics

    • Size

      128KB

    • MD5

      a04a490b2a1c8cbfa2a2bd238800eca0

    • SHA1

      0ac7418bd48bcfa90c0271db4f22ebb16aa20c11

    • SHA256

      3edd371bdd930daf351b9ab3b6e3d519d41dfc6e44b18868f13076407425975d

    • SHA512

      1147b19d5600058509f35af910629936f59d0764842da9a80bb6a5ae0141858e0b532a8516e5b5242519f21b31ac46e885bc8f7e0633c01122aae5c5103f5610

    • SSDEEP

      3072:jSRhypzuj/34Ok1CHjMQH2qC7ZQOlzSLUK6MwGsGnDc9nhViX:jSyxus1CHjMQWfdQOhwJ6MwGsy

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks