Overview

overview

10

Static

static

7

22574ea797...cs.exe

windows7-x64

10

22574ea797...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22574ea79703616b8a64f49478af3c33_NeikiAnalytics.exe

  • Size

    1.0MB

  • Sample

    240518-m8y3hsgd62

  • MD5

    22574ea79703616b8a64f49478af3c33

  • SHA1

    3d24afa42babd2a351cb2629b9eaa18601e0e2d1

  • SHA256

    e4c1c2c2bf62a0e244865b6ff7bf734e25628870b27eb056c81ff5da637ad68b

  • SHA512

    48e1aec379c577e63f94a5b5c890ace4d8608a2e468e09cae2632f46945dde7ca7c9bf0bb2a5f75932ea0f6a477a97da60726cb8cb8da8025e403b427669664e

  • SSDEEP

    24576:n5lCwo7y6mI96s+Z1Hjsf8SM/biGk8qzD:n59o75ms6RZ1HjdSuzqn

Score
10/10
salitybackdoorevasiontrojanupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

    • Target

      22574ea79703616b8a64f49478af3c33_NeikiAnalytics.exe

    • Size

      1.0MB

    • MD5

      22574ea79703616b8a64f49478af3c33

    • SHA1

      3d24afa42babd2a351cb2629b9eaa18601e0e2d1

    • SHA256

      e4c1c2c2bf62a0e244865b6ff7bf734e25628870b27eb056c81ff5da637ad68b

    • SHA512

      48e1aec379c577e63f94a5b5c890ace4d8608a2e468e09cae2632f46945dde7ca7c9bf0bb2a5f75932ea0f6a477a97da60726cb8cb8da8025e403b427669664e

    • SSDEEP

      24576:n5lCwo7y6mI96s+Z1Hjsf8SM/biGk8qzD:n59o75ms6RZ1HjdSuzqn

    Score
    10/10
    salitybackdoorevasiontrojanupx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Privilege Escalation

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Defense Evasion

Modify Registry

5
T1112

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Impair Defenses

3
T1562

Disable or Modify Tools

3
T1562.001

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks