Overview

overview

10

Static

static

3

137d251304...cs.exe

windows7-x64

10

137d251304...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    137d2513043bafaf4dd9e693241c6680_NeikiAnalytics

  • Size

    211KB

  • Sample

    240512-qhy7dagb8y

  • MD5

    137d2513043bafaf4dd9e693241c6680

  • SHA1

    321f54402f34d8037749f43bacc03840d5228186

  • SHA256

    ca04e2fdabce831427ceec09b6675f3c547cc4d0fbc6b98c9edae2e478f3662f

  • SHA512

    307a9556539b844b8667fb5bfcc674718c407b02e27b5888ad5846c3301fbf6e60c72558bde8ed5f267face970d1fbcde0d2fd94ec863266e321dc974ae34ebb

  • SSDEEP

    3072:bDpM9Nvih5c9DE1pvAPXIHLfMgw7ySBL8PEAjAfIbAYGPJz6sPJBINFZ1Fqnv:b1iNKQxENHLfMgw7y9ZrK

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      137d2513043bafaf4dd9e693241c6680_NeikiAnalytics

    • Size

      211KB

    • MD5

      137d2513043bafaf4dd9e693241c6680

    • SHA1

      321f54402f34d8037749f43bacc03840d5228186

    • SHA256

      ca04e2fdabce831427ceec09b6675f3c547cc4d0fbc6b98c9edae2e478f3662f

    • SHA512

      307a9556539b844b8667fb5bfcc674718c407b02e27b5888ad5846c3301fbf6e60c72558bde8ed5f267face970d1fbcde0d2fd94ec863266e321dc974ae34ebb

    • SSDEEP

      3072:bDpM9Nvih5c9DE1pvAPXIHLfMgw7ySBL8PEAjAfIbAYGPJz6sPJBINFZ1Fqnv:b1iNKQxENHLfMgw7y9ZrK

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks