Overview

overview

8

Static

static

7

add255c7b9...cs.exe

windows7-x64

8

add255c7b9...cs.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    add255c7b9cce76882dab3aa8e7c82d0_NeikiAnalytics

  • Size

    53KB

  • Sample

    240511-mqkgeaff76

  • MD5

    add255c7b9cce76882dab3aa8e7c82d0

  • SHA1

    6a5dabb1ff38099e9ccda3716831d68e933655d5

  • SHA256

    47518f9cd3c144891264aeeb187fc41f30fd644a571534da736f94341d33d7d4

  • SHA512

    0120759a0fc08fa21d362360982e0db7ee23c18cdf3021bb38d2d49c903089f55bccdb3188f7f783dd234f5448d35f6cd44c8f6c2b330f4d23aa87704fbc7e56

  • SSDEEP

    384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiiq:3DcZyUpULCgod/J96ayXv/pWnnAp

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      add255c7b9cce76882dab3aa8e7c82d0_NeikiAnalytics

    • Size

      53KB

    • MD5

      add255c7b9cce76882dab3aa8e7c82d0

    • SHA1

      6a5dabb1ff38099e9ccda3716831d68e933655d5

    • SHA256

      47518f9cd3c144891264aeeb187fc41f30fd644a571534da736f94341d33d7d4

    • SHA512

      0120759a0fc08fa21d362360982e0db7ee23c18cdf3021bb38d2d49c903089f55bccdb3188f7f783dd234f5448d35f6cd44c8f6c2b330f4d23aa87704fbc7e56

    • SSDEEP

      384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiiq:3DcZyUpULCgod/J96ayXv/pWnnAp

    Score
    8/10
    evasionupx

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks