Overview

overview

10

Static

static

7

2864cad602...cs.exe

windows7-x64

10

2864cad602...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2864cad602dcf5d68d95c19709244d80_NeikiAnalytics

  • Size

    22KB

  • Sample

    240512-s9d2maga58

  • MD5

    2864cad602dcf5d68d95c19709244d80

  • SHA1

    ec1fa271bd724f6f40ca0e14a34cc964b734a814

  • SHA256

    d34d0a75e0be84749bd8da8304f42ae8d874c5bf7b4b5d992245115a6e5d7a64

  • SHA512

    fb9accc7a675680e92e41336993426457f835ead2ece1c2d18501e33b314be51ca2fb71e32f2fec6c15dcf01e99a7471be3eeaa5036135fb7d2add6b8ecfc837

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6w:rRkiLw3HsDSARGG/MMb7rw

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      2864cad602dcf5d68d95c19709244d80_NeikiAnalytics

    • Size

      22KB

    • MD5

      2864cad602dcf5d68d95c19709244d80

    • SHA1

      ec1fa271bd724f6f40ca0e14a34cc964b734a814

    • SHA256

      d34d0a75e0be84749bd8da8304f42ae8d874c5bf7b4b5d992245115a6e5d7a64

    • SHA512

      fb9accc7a675680e92e41336993426457f835ead2ece1c2d18501e33b314be51ca2fb71e32f2fec6c15dcf01e99a7471be3eeaa5036135fb7d2add6b8ecfc837

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6w:rRkiLw3HsDSARGG/MMb7rw

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks