Overview

overview

10

Static

static

3

c804e1118b...cs.exe

windows7-x64

10

c804e1118b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c804e1118b565b034f44b70769b15740_NeikiAnalytics

  • Size

    296KB

  • Sample

    240514-qfystsgh73

  • MD5

    c804e1118b565b034f44b70769b15740

  • SHA1

    adc80ba2cc2eb562a70bc8d37828c6b8923eea3f

  • SHA256

    228ad8f4ed8c6c05e5d241529e2ce4206bbb4e6eed89fdf21756ad14be8b1131

  • SHA512

    7799427e1f07c19f53b679b39b9fbbf930a0864125d95681252d09dec60f192ba0ecffd4ed60d9139d8735935786b8acdb74b24a17359ea336be891e77ddf8cb

  • SSDEEP

    6144:L2bFRcuJcCC2lfKgO32mO1IdifegrSQOJMmSnxtAPUWJj9/P/oEAlu9UY6L6P:LiPTCqmjZHJFnPnp6l2UuP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c804e1118b565b034f44b70769b15740_NeikiAnalytics

    • Size

      296KB

    • MD5

      c804e1118b565b034f44b70769b15740

    • SHA1

      adc80ba2cc2eb562a70bc8d37828c6b8923eea3f

    • SHA256

      228ad8f4ed8c6c05e5d241529e2ce4206bbb4e6eed89fdf21756ad14be8b1131

    • SHA512

      7799427e1f07c19f53b679b39b9fbbf930a0864125d95681252d09dec60f192ba0ecffd4ed60d9139d8735935786b8acdb74b24a17359ea336be891e77ddf8cb

    • SSDEEP

      6144:L2bFRcuJcCC2lfKgO32mO1IdifegrSQOJMmSnxtAPUWJj9/P/oEAlu9UY6L6P:LiPTCqmjZHJFnPnp6l2UuP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks