Overview

overview

8

Static

static

7

789a341575...cs.exe

windows7-x64

8

789a341575...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    789a341575972fe95dfccf2308a221d0_NeikiAnalytics

  • Size

    3.7MB

  • Sample

    240512-hfkxzadb31

  • MD5

    789a341575972fe95dfccf2308a221d0

  • SHA1

    1639f0ab97dc8fd6fe144091742910bf09372151

  • SHA256

    5cfc8d4f7d983092569ef845401d0a7920d86f387b02d1d9c8ebdadaab2a5582

  • SHA512

    34cd38f58d9f87df35093474375862b97ac88339fa55d3bbe7917b3ac5fe3c45a5fdff7194e941a9286953e7118abe6b4a3592b794d42dfcb012a98141be9f2b

  • SSDEEP

    98304:y3rWjizNfd71aofFsZJzHBKCVKpah3+R1icFW9w1/eNJ4C+:yWji9iTBKpT1icFb/egC+

Score
8/10
persistencevmprotect

Malware Config

Targets

    • Target

      789a341575972fe95dfccf2308a221d0_NeikiAnalytics

    • Size

      3.7MB

    • MD5

      789a341575972fe95dfccf2308a221d0

    • SHA1

      1639f0ab97dc8fd6fe144091742910bf09372151

    • SHA256

      5cfc8d4f7d983092569ef845401d0a7920d86f387b02d1d9c8ebdadaab2a5582

    • SHA512

      34cd38f58d9f87df35093474375862b97ac88339fa55d3bbe7917b3ac5fe3c45a5fdff7194e941a9286953e7118abe6b4a3592b794d42dfcb012a98141be9f2b

    • SSDEEP

      98304:y3rWjizNfd71aofFsZJzHBKCVKpah3+R1icFW9w1/eNJ4C+:yWji9iTBKpT1icFb/egC+

    Score
    8/10
    persistencevmprotect

    • Modifies AppInit DLL entries

      persistence

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks