Overview

overview

10

Static

static

3

a33f638ab9...cs.exe

windows7-x64

10

a33f638ab9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a33f638ab949117a6e8402dd22e320d0_NeikiAnalytics.exe

  • Size

    320KB

  • Sample

    240517-epbh4sgg98

  • MD5

    a33f638ab949117a6e8402dd22e320d0

  • SHA1

    c3bb63f343c28f1e61f479b51052f581d16ff606

  • SHA256

    40f365cbbd78ec3444011175a655edd5ee7184f1f971ad496c3d5da54ccaca83

  • SHA512

    1c2c058d5b6d26524a36316b2b149c2d6f2aba25794deab7b3430e20c601a347cc195dd7f1810cfd38f5b5522e6d654a7f1c08fe0b13a784c530237367b0374f

  • SSDEEP

    6144:LinRaZSJUvlPY/m05XUEtMEX6vluZV4U/vlf0DrBqvl8ZV4U/vlfl+9Q:WnI3vYm05XEvG6IveDVqvQ6IvP

Score
10/10
persistence

Malware Config

Targets

    • Target

      a33f638ab949117a6e8402dd22e320d0_NeikiAnalytics.exe

    • Size

      320KB

    • MD5

      a33f638ab949117a6e8402dd22e320d0

    • SHA1

      c3bb63f343c28f1e61f479b51052f581d16ff606

    • SHA256

      40f365cbbd78ec3444011175a655edd5ee7184f1f971ad496c3d5da54ccaca83

    • SHA512

      1c2c058d5b6d26524a36316b2b149c2d6f2aba25794deab7b3430e20c601a347cc195dd7f1810cfd38f5b5522e6d654a7f1c08fe0b13a784c530237367b0374f

    • SSDEEP

      6144:LinRaZSJUvlPY/m05XUEtMEX6vluZV4U/vlf0DrBqvl8ZV4U/vlfl+9Q:WnI3vYm05XEvG6IveDVqvQ6IvP

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks