Overview

overview

8

Static

static

7

c311989dc2...cs.exe

windows7-x64

8

c311989dc2...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c311989dc25b99bdcca099d44c786690_NeikiAnalytics

  • Size

    153KB

  • Sample

    240514-mlys8scd99

  • MD5

    c311989dc25b99bdcca099d44c786690

  • SHA1

    063dc3564894eb01d41ecd987869605cd3ee0342

  • SHA256

    96cda85f4f7f7e1f8b0cd66ebc4edee70db661b490ebfddec6b566870232c359

  • SHA512

    a6266f66e34470909868c1841303e4d128494ef8b0d6122ef07e5684686e2ce4469555f6208a6eb9cd76c63ffa05270ea59f9a8f5d60b3bfa126cd2713e952f7

  • SSDEEP

    768:5TNWrItKyw5WHXfQmjIiIk9ecAa7pP1m96MyX2tl39cJzyUAkVtTi4J:pEr3Z5IfQmv81a7pP1m3yX2tM/jTd

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      c311989dc25b99bdcca099d44c786690_NeikiAnalytics

    • Size

      153KB

    • MD5

      c311989dc25b99bdcca099d44c786690

    • SHA1

      063dc3564894eb01d41ecd987869605cd3ee0342

    • SHA256

      96cda85f4f7f7e1f8b0cd66ebc4edee70db661b490ebfddec6b566870232c359

    • SHA512

      a6266f66e34470909868c1841303e4d128494ef8b0d6122ef07e5684686e2ce4469555f6208a6eb9cd76c63ffa05270ea59f9a8f5d60b3bfa126cd2713e952f7

    • SSDEEP

      768:5TNWrItKyw5WHXfQmjIiIk9ecAa7pP1m96MyX2tl39cJzyUAkVtTi4J:pEr3Z5IfQmv81a7pP1m3yX2tM/jTd

    Score
    8/10
    evasionupx

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks