Overview

overview

10

Static

static

3

05ab502b0a...cs.exe

windows7-x64

10

05ab502b0a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05ab502b0a68665de7fc494ed06e2ff0_NeikiAnalytics

  • Size

    41KB

  • Sample

    240513-xz7y6sbd42

  • MD5

    05ab502b0a68665de7fc494ed06e2ff0

  • SHA1

    24f191e0e001160d2bf6e8255600690efe8a9b80

  • SHA256

    5169f049a8d799f0f64901d974c29105ad117439c7dd3e3ea991841078d3ee67

  • SHA512

    9ad38efb0391f376daf2e416de47700c28990b660b17b7a6f7f91242ba5468dddd6ce342b676883621347f197a67935b8714fcc523f8f8c71d2fdf5bd34798cc

  • SSDEEP

    768:+iZNPp0b5BbrMVUTBv6mkZ8jA7IwnDoSdB:+WNBGBrM6Fv6mkqyo8

Score
10/10
persistence

Malware Config

Targets

    • Target

      05ab502b0a68665de7fc494ed06e2ff0_NeikiAnalytics

    • Size

      41KB

    • MD5

      05ab502b0a68665de7fc494ed06e2ff0

    • SHA1

      24f191e0e001160d2bf6e8255600690efe8a9b80

    • SHA256

      5169f049a8d799f0f64901d974c29105ad117439c7dd3e3ea991841078d3ee67

    • SHA512

      9ad38efb0391f376daf2e416de47700c28990b660b17b7a6f7f91242ba5468dddd6ce342b676883621347f197a67935b8714fcc523f8f8c71d2fdf5bd34798cc

    • SSDEEP

      768:+iZNPp0b5BbrMVUTBv6mkZ8jA7IwnDoSdB:+WNBGBrM6Fv6mkqyo8

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks