Overview

overview

10

Static

static

3

aa491b6396...cs.exe

windows7-x64

10

aa491b6396...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa491b6396fccadc26fe714042ce27a4_NeikiAnalytics.exe

  • Size

    207KB

  • Sample

    240517-fdravsaa88

  • MD5

    aa491b6396fccadc26fe714042ce27a4

  • SHA1

    39f06c0e13758ccdb55b44a5ace6c37d65de3661

  • SHA256

    5b8da2b910975722038604f66bf4469b6908f10f73879e3b873bec870bf7e9b4

  • SHA512

    43f0135ce1e3e6be274b81c89956213839c3b8d5e952a24c2d33438853525dc2fca7853de66195197a3b4180b02ce5f55cedf78cabc5d4794ca69f2d26f08c6b

  • SSDEEP

    3072:3fvfsHoBlProD1VjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:3f8HesD1Vjj+VPj92d62ASOwj

Score
10/10
persistence

Malware Config

Targets

    • Target

      aa491b6396fccadc26fe714042ce27a4_NeikiAnalytics.exe

    • Size

      207KB

    • MD5

      aa491b6396fccadc26fe714042ce27a4

    • SHA1

      39f06c0e13758ccdb55b44a5ace6c37d65de3661

    • SHA256

      5b8da2b910975722038604f66bf4469b6908f10f73879e3b873bec870bf7e9b4

    • SHA512

      43f0135ce1e3e6be274b81c89956213839c3b8d5e952a24c2d33438853525dc2fca7853de66195197a3b4180b02ce5f55cedf78cabc5d4794ca69f2d26f08c6b

    • SSDEEP

      3072:3fvfsHoBlProD1VjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:3f8HesD1Vjj+VPj92d62ASOwj

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks