Overview

overview

10

Static

static

3

6cb62e334d...cs.exe

windows7-x64

10

6cb62e334d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6cb62e334dc2c2325c9d98691f0be8d0_NeikiAnalytics

  • Size

    124KB

  • Sample

    240515-dnx52sed4y

  • MD5

    6cb62e334dc2c2325c9d98691f0be8d0

  • SHA1

    a42fde65ba94f9be9bc0cdf8e002cc2e032ad504

  • SHA256

    e5caa697b96ff1c27be55eb8b6cc0e03d14816c821ce952a200210f032d601cd

  • SHA512

    0a015243530cbfb15503c40f4709dd682adeee13869ac43a66a2846e3d9f3a55379e9ec7ee09b9732d6252619cfa2f7ff0bf66872b50331c93bf1f3aedcd77c0

  • SSDEEP

    1536:A/bszV5YGhRO/N69BH3OoGa+FL9jKceRgrkjSo3E:cGzYGhkFoN3Oo1+F92SP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6cb62e334dc2c2325c9d98691f0be8d0_NeikiAnalytics

    • Size

      124KB

    • MD5

      6cb62e334dc2c2325c9d98691f0be8d0

    • SHA1

      a42fde65ba94f9be9bc0cdf8e002cc2e032ad504

    • SHA256

      e5caa697b96ff1c27be55eb8b6cc0e03d14816c821ce952a200210f032d601cd

    • SHA512

      0a015243530cbfb15503c40f4709dd682adeee13869ac43a66a2846e3d9f3a55379e9ec7ee09b9732d6252619cfa2f7ff0bf66872b50331c93bf1f3aedcd77c0

    • SSDEEP

      1536:A/bszV5YGhRO/N69BH3OoGa+FL9jKceRgrkjSo3E:cGzYGhkFoN3Oo1+F92SP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks