Overview

overview

10

Static

static

3

57383fec00...cs.exe

windows7-x64

10

57383fec00...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57383fec00b3f2d23bdf73e8a81d0900_NeikiAnalytics.exe

  • Size

    82KB

  • Sample

    240516-3fgkrseb9t

  • MD5

    57383fec00b3f2d23bdf73e8a81d0900

  • SHA1

    224813fbb7f88baeca8096e58d5bb6c4add84592

  • SHA256

    05dd614affc6abd27fe11bdfde8581e972fc3c2beea7b5ee8b0e6cdac1e255da

  • SHA512

    603342f98ff5e4751b15f57708b2744607fea31434bd67a451f184213762dfa6e893e6dfbbd2d93e2fd56344f9cbcf16ec6a582d3daecc80056414d2101facb3

  • SSDEEP

    768:yZVy+DZ4mV+RMO2rhgFwuqCbxTGy/BBGg4NKhLU4dhbDW2+Kv00dX0vN0TlT+Xyq:wamlu3hbBGy3G8nhMp4s1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      57383fec00b3f2d23bdf73e8a81d0900_NeikiAnalytics.exe

    • Size

      82KB

    • MD5

      57383fec00b3f2d23bdf73e8a81d0900

    • SHA1

      224813fbb7f88baeca8096e58d5bb6c4add84592

    • SHA256

      05dd614affc6abd27fe11bdfde8581e972fc3c2beea7b5ee8b0e6cdac1e255da

    • SHA512

      603342f98ff5e4751b15f57708b2744607fea31434bd67a451f184213762dfa6e893e6dfbbd2d93e2fd56344f9cbcf16ec6a582d3daecc80056414d2101facb3

    • SSDEEP

      768:yZVy+DZ4mV+RMO2rhgFwuqCbxTGy/BBGg4NKhLU4dhbDW2+Kv00dX0vN0TlT+Xyq:wamlu3hbBGy3G8nhMp4s1

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks