Overview

overview

10

Static

static

3

bf446d67a9...cs.exe

windows7-x64

10

bf446d67a9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf446d67a9d3f574f6cbdbb15e850f40_NeikiAnalytics

  • Size

    128KB

  • Sample

    240514-llcekaah56

  • MD5

    bf446d67a9d3f574f6cbdbb15e850f40

  • SHA1

    839dbd4bc32a1ca174f4bbe784bd0ce741be9000

  • SHA256

    7acd070c0898dcc66b64e631db4cf8ccab65794285c74d6fbdcd1589471c1f6f

  • SHA512

    96ac8cdde2adee27d7494232dcbaed9e7d86b6afc90dc3b38cca1d9d2abd48b9f85e0f9eccfde1748206eebb3bae6c27e16a128c1925b0f26c771530cedc1a69

  • SSDEEP

    3072:Is0G+jtN7F6R6CIHaaf8Xp+1AerDtsr3vhqhEN4MAH+mbp:TYJNRxCITsp+1AelhEN4Mujp

Score
10/10
persistence

Malware Config

Targets

    • Target

      bf446d67a9d3f574f6cbdbb15e850f40_NeikiAnalytics

    • Size

      128KB

    • MD5

      bf446d67a9d3f574f6cbdbb15e850f40

    • SHA1

      839dbd4bc32a1ca174f4bbe784bd0ce741be9000

    • SHA256

      7acd070c0898dcc66b64e631db4cf8ccab65794285c74d6fbdcd1589471c1f6f

    • SHA512

      96ac8cdde2adee27d7494232dcbaed9e7d86b6afc90dc3b38cca1d9d2abd48b9f85e0f9eccfde1748206eebb3bae6c27e16a128c1925b0f26c771530cedc1a69

    • SSDEEP

      3072:Is0G+jtN7F6R6CIHaaf8Xp+1AerDtsr3vhqhEN4MAH+mbp:TYJNRxCITsp+1AelhEN4Mujp

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks