Overview

overview

10

Static

static

3

a2c4b15f34...cs.exe

windows7-x64

10

a2c4b15f34...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2c4b15f342bba68ff3953554261f2d0_NeikiAnalytics

  • Size

    53KB

  • Sample

    240513-hlecdabb2z

  • MD5

    a2c4b15f342bba68ff3953554261f2d0

  • SHA1

    d1ee6a1afc47e521b05ce54c3df4684b527c1673

  • SHA256

    3aa34f47d9eac7781ddcb8296dc9c8df8adbf8a76d92a81fad4ee67e03ceb67f

  • SHA512

    8243158aea89503a7a0cf9c1f8a1031757ad84ccddf19eb1e69b376ef49249d48103185a482edf9635adff394161fe8eb6d4942d53e640dd4e040acefe196d5d

  • SSDEEP

    1536:vNyg8r8QZReCd7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:8ReCdJJjmLM3zRJWZsXy4Jt

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a2c4b15f342bba68ff3953554261f2d0_NeikiAnalytics

    • Size

      53KB

    • MD5

      a2c4b15f342bba68ff3953554261f2d0

    • SHA1

      d1ee6a1afc47e521b05ce54c3df4684b527c1673

    • SHA256

      3aa34f47d9eac7781ddcb8296dc9c8df8adbf8a76d92a81fad4ee67e03ceb67f

    • SHA512

      8243158aea89503a7a0cf9c1f8a1031757ad84ccddf19eb1e69b376ef49249d48103185a482edf9635adff394161fe8eb6d4942d53e640dd4e040acefe196d5d

    • SSDEEP

      1536:vNyg8r8QZReCd7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:8ReCdJJjmLM3zRJWZsXy4Jt

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks