Overview

overview

10

Static

static

3

7692131208...cs.exe

windows7-x64

10

7692131208...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7692131208cea70770a863fbdc6a1130_NeikiAnalytics

  • Size

    53KB

  • Sample

    240512-g34g6afh53

  • MD5

    7692131208cea70770a863fbdc6a1130

  • SHA1

    34f2cda379dfc0e0fe590ba942ca5ad46b086a34

  • SHA256

    30bcfae9e977fb095c1dd1883efb58a5acf33705925aa6b339b653a61aa0187e

  • SHA512

    947937fd71f344adb91b9fb3feaf9c3ae2cd0a462852ca2c644b7f8395c44c530199eadf90ea2f0d341e1b6768808d32790193c05331ab108d74461a1a8a740a

  • SSDEEP

    1536:vNig8r8QrhPZN7Kp3StjEMjmLM3ztDJWZsXy4JzxPMk:+hPvJJjmLM3zRJWZsXy4JN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7692131208cea70770a863fbdc6a1130_NeikiAnalytics

    • Size

      53KB

    • MD5

      7692131208cea70770a863fbdc6a1130

    • SHA1

      34f2cda379dfc0e0fe590ba942ca5ad46b086a34

    • SHA256

      30bcfae9e977fb095c1dd1883efb58a5acf33705925aa6b339b653a61aa0187e

    • SHA512

      947937fd71f344adb91b9fb3feaf9c3ae2cd0a462852ca2c644b7f8395c44c530199eadf90ea2f0d341e1b6768808d32790193c05331ab108d74461a1a8a740a

    • SSDEEP

      1536:vNig8r8QrhPZN7Kp3StjEMjmLM3ztDJWZsXy4JzxPMk:+hPvJJjmLM3zRJWZsXy4JN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks