Overview

overview

10

Static

static

3

c1334b1148...cs.exe

windows7-x64

10

c1334b1148...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1334b11488b14aee2a4cf0865d0fce0_NeikiAnalytics

  • Size

    206KB

  • Sample

    240510-mbfjxagh6z

  • MD5

    c1334b11488b14aee2a4cf0865d0fce0

  • SHA1

    5bc8022299748c2f50c3dda37cf92e7d9c1581e7

  • SHA256

    b18273cc9f35ab7ea574d1337bb69f735824ab276a742198e34e9457e40f4c8a

  • SHA512

    2563cae0b45f2d0b81aac615af38cb7bb854d4e2d1a6f095ef737bf629531caefd57bf84380ae75ec5eb2d12ee58c53ee21da4819e4089dad9a8990c3696654b

  • SSDEEP

    3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unt:zvEN2U+T6i5LirrllHy4HUcMQY64

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c1334b11488b14aee2a4cf0865d0fce0_NeikiAnalytics

    • Size

      206KB

    • MD5

      c1334b11488b14aee2a4cf0865d0fce0

    • SHA1

      5bc8022299748c2f50c3dda37cf92e7d9c1581e7

    • SHA256

      b18273cc9f35ab7ea574d1337bb69f735824ab276a742198e34e9457e40f4c8a

    • SHA512

      2563cae0b45f2d0b81aac615af38cb7bb854d4e2d1a6f095ef737bf629531caefd57bf84380ae75ec5eb2d12ee58c53ee21da4819e4089dad9a8990c3696654b

    • SSDEEP

      3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unt:zvEN2U+T6i5LirrllHy4HUcMQY64

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks