Overview

overview

10

Static

static

3

628dc8fe1e...cs.exe

windows7-x64

10

628dc8fe1e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    628dc8fe1e56b8e6727feb906d5dfc80_NeikiAnalytics

  • Size

    211KB

  • Sample

    240516-atxjxsca21

  • MD5

    628dc8fe1e56b8e6727feb906d5dfc80

  • SHA1

    8144c1e845ea826845c472cfa5ab9550f9945e74

  • SHA256

    9c883f4f6091e3aac109fa94932bacbac0f04f286ba4eeee7be35971c3b5b3ab

  • SHA512

    f0a43476ecdd0ecf7be146129cddb1c04584d1496b5e573b6dca3e90c0d871d2b90798fa0ed54717ad82eea332dc5c4cf7164f06d649846a09c8959c947fcd9f

  • SSDEEP

    3072:bDpM9Nvih5c9DE1pvAPXIHLfMgw7ySBL8PEAjAfIbAYGPJz6sPJBINFZ1Fqnz:b1iNKQxENHLfMgw7y9Zr4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      628dc8fe1e56b8e6727feb906d5dfc80_NeikiAnalytics

    • Size

      211KB

    • MD5

      628dc8fe1e56b8e6727feb906d5dfc80

    • SHA1

      8144c1e845ea826845c472cfa5ab9550f9945e74

    • SHA256

      9c883f4f6091e3aac109fa94932bacbac0f04f286ba4eeee7be35971c3b5b3ab

    • SHA512

      f0a43476ecdd0ecf7be146129cddb1c04584d1496b5e573b6dca3e90c0d871d2b90798fa0ed54717ad82eea332dc5c4cf7164f06d649846a09c8959c947fcd9f

    • SSDEEP

      3072:bDpM9Nvih5c9DE1pvAPXIHLfMgw7ySBL8PEAjAfIbAYGPJz6sPJBINFZ1Fqnz:b1iNKQxENHLfMgw7y9Zr4

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks