Overview

overview

10

Static

static

7

29949ed101...cs.exe

windows7-x64

10

29949ed101...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    29949ed101512c51467d7ba23b12bcc0_NeikiAnalytics

  • Size

    22KB

  • Sample

    240515-yzgyesab67

  • MD5

    29949ed101512c51467d7ba23b12bcc0

  • SHA1

    42e09b92c2b68f7e1994008127975573ce188c40

  • SHA256

    945b63e12edf5b5cf1a0631271b42de5b9cdedc4772bf6ef714c4b7f9c74896a

  • SHA512

    e7892487d5149452b2e3e879cd725f9d21e20a5515babcc7eed27c8d278ee6997353d2cec41ad9f0a7d1751e5d65916797bb142af94a296aad15c02579841c16

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6cUfr:rRkiLw3HsDSARGG/MMb7rxr

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      29949ed101512c51467d7ba23b12bcc0_NeikiAnalytics

    • Size

      22KB

    • MD5

      29949ed101512c51467d7ba23b12bcc0

    • SHA1

      42e09b92c2b68f7e1994008127975573ce188c40

    • SHA256

      945b63e12edf5b5cf1a0631271b42de5b9cdedc4772bf6ef714c4b7f9c74896a

    • SHA512

      e7892487d5149452b2e3e879cd725f9d21e20a5515babcc7eed27c8d278ee6997353d2cec41ad9f0a7d1751e5d65916797bb142af94a296aad15c02579841c16

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6cUfr:rRkiLw3HsDSARGG/MMb7rxr

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks