Overview

overview

10

Static

static

3

128eef13c6...cs.exe

windows7-x64

10

128eef13c6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    128eef13c62f907057675374a28c5ca0_NeikiAnalytics.exe

  • Size

    40KB

  • Sample

    240517-whtjsabd7x

  • MD5

    128eef13c62f907057675374a28c5ca0

  • SHA1

    b020d4f613b5ecfb224a122f16ba112e9bea3677

  • SHA256

    e573ddf2987e9db3d19f6166cee22f44c851cd69fa1d4b89232eecdfb2b5940f

  • SHA512

    5118491c7f4abe2ce173799aa7155e54cf5d5f83f1d9608d0ef93da92604c61a391f1d89f70101ccf3cba9089a3d98ac9b83e3fbe90bb6ccf6d0a0799be0c10d

  • SSDEEP

    768:k/fko/XyGtJk+FBp8F9bdHXtHs7CQpcdHoCCvc:kUAtK+N8F95NWee1vc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      128eef13c62f907057675374a28c5ca0_NeikiAnalytics.exe

    • Size

      40KB

    • MD5

      128eef13c62f907057675374a28c5ca0

    • SHA1

      b020d4f613b5ecfb224a122f16ba112e9bea3677

    • SHA256

      e573ddf2987e9db3d19f6166cee22f44c851cd69fa1d4b89232eecdfb2b5940f

    • SHA512

      5118491c7f4abe2ce173799aa7155e54cf5d5f83f1d9608d0ef93da92604c61a391f1d89f70101ccf3cba9089a3d98ac9b83e3fbe90bb6ccf6d0a0799be0c10d

    • SSDEEP

      768:k/fko/XyGtJk+FBp8F9bdHXtHs7CQpcdHoCCvc:kUAtK+N8F95NWee1vc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks