Overview

overview

10

Static

static

3

dcf97a1610...cs.exe

windows7-x64

10

dcf97a1610...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dcf97a1610945405ffa5b5caa8ade960_NeikiAnalytics

  • Size

    96KB

  • Sample

    240516-nrgbtabb49

  • MD5

    dcf97a1610945405ffa5b5caa8ade960

  • SHA1

    92e2c3a263824c5494392c5cede75198c7c76bd3

  • SHA256

    5a8de6d7f5c9851d6034322b8ff6b1926230bc4945bd869d2fced55b7fadfb6c

  • SHA512

    6d0a8f4d947df73b517d9513cb7090169c1611e225fc87d2b0d5aa0cbc698cf7eb8d65e39c1966503af424ba1c95d0bdc578157a08b881eadc619cdf6c7f0e2e

  • SSDEEP

    1536:08bESDvL70BVgwnPVkCmffkh6fffNjnndA5hrUQVoMdUT+irF:BESDvLI7gwnPVklf9jdA5hr1Rhk

Score
10/10
persistence

Malware Config

Targets

    • Target

      dcf97a1610945405ffa5b5caa8ade960_NeikiAnalytics

    • Size

      96KB

    • MD5

      dcf97a1610945405ffa5b5caa8ade960

    • SHA1

      92e2c3a263824c5494392c5cede75198c7c76bd3

    • SHA256

      5a8de6d7f5c9851d6034322b8ff6b1926230bc4945bd869d2fced55b7fadfb6c

    • SHA512

      6d0a8f4d947df73b517d9513cb7090169c1611e225fc87d2b0d5aa0cbc698cf7eb8d65e39c1966503af424ba1c95d0bdc578157a08b881eadc619cdf6c7f0e2e

    • SSDEEP

      1536:08bESDvL70BVgwnPVkCmffkh6fffNjnndA5hrUQVoMdUT+irF:BESDvLI7gwnPVklf9jdA5hr1Rhk

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks