Overview

overview

10

Static

static

7

c0278fce1b...cs.exe

windows7-x64

10

c0278fce1b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0278fce1b4dcc3425b87e2da4bce0e0_NeikiAnalytics

  • Size

    239KB

  • Sample

    240513-wc5d4aff8z

  • MD5

    c0278fce1b4dcc3425b87e2da4bce0e0

  • SHA1

    c1864e0976d04b5320dee4a6a0b25fd1a1da0f34

  • SHA256

    11980b6bfc58c36d77621917b1d63ada270a018735cfbdfdad5043682f5ada3d

  • SHA512

    7e764fe74bf1d8b23b4074a48c3638174731ece5dd66d5a0b89877328c24569fc6154c535a38b488d1eaf01fd9325beca218b2328b4528fed755615f59860920

  • SSDEEP

    6144:TvNNycZpNBB38b3Eprf59zlyclDpNBB38b3Epr6Gyx3M9rcLzh313:Tvf1lIfJmrcLzhx

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      c0278fce1b4dcc3425b87e2da4bce0e0_NeikiAnalytics

    • Size

      239KB

    • MD5

      c0278fce1b4dcc3425b87e2da4bce0e0

    • SHA1

      c1864e0976d04b5320dee4a6a0b25fd1a1da0f34

    • SHA256

      11980b6bfc58c36d77621917b1d63ada270a018735cfbdfdad5043682f5ada3d

    • SHA512

      7e764fe74bf1d8b23b4074a48c3638174731ece5dd66d5a0b89877328c24569fc6154c535a38b488d1eaf01fd9325beca218b2328b4528fed755615f59860920

    • SSDEEP

      6144:TvNNycZpNBB38b3Eprf59zlyclDpNBB38b3Epr6Gyx3M9rcLzh313:Tvf1lIfJmrcLzhx

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks