Overview

overview

10

Static

static

3

25892262fb...cs.exe

windows7-x64

10

25892262fb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    25892262fb32e06c0c995217b86c1980_NeikiAnalytics

  • Size

    45KB

  • Sample

    240514-zrwbhsgf32

  • MD5

    25892262fb32e06c0c995217b86c1980

  • SHA1

    37ee33a2e5d3159070ca8ad396e2a49b3af07d9b

  • SHA256

    7f009cf9041a24ef7ec26ab3a6019a4a398df0c93e645d099ebac392436deff9

  • SHA512

    34697c95e8c1fdfb4ff5a6fa0a79f4aa8eb0915bbac0c24f3e30d46c290186c5487917237fc0464334d049ee4f095b70b0a58ee890df1ead021361e095989c39

  • SSDEEP

    768:2mFQj8rM9whcqet8WfYUtT92S21XFXRnnePxCXNvF7DFK+5nE0:8AwEmBj3EXHn4x+9a0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      25892262fb32e06c0c995217b86c1980_NeikiAnalytics

    • Size

      45KB

    • MD5

      25892262fb32e06c0c995217b86c1980

    • SHA1

      37ee33a2e5d3159070ca8ad396e2a49b3af07d9b

    • SHA256

      7f009cf9041a24ef7ec26ab3a6019a4a398df0c93e645d099ebac392436deff9

    • SHA512

      34697c95e8c1fdfb4ff5a6fa0a79f4aa8eb0915bbac0c24f3e30d46c290186c5487917237fc0464334d049ee4f095b70b0a58ee890df1ead021361e095989c39

    • SSDEEP

      768:2mFQj8rM9whcqet8WfYUtT92S21XFXRnnePxCXNvF7DFK+5nE0:8AwEmBj3EXHn4x+9a0

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables use of System Restore points

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks