Overview

overview

10

Static

static

3

39ca736d5d...cs.exe

windows7-x64

10

39ca736d5d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    39ca736d5deda9f5e72721fc6d3db4d0_NeikiAnalytics.exe

  • Size

    144KB

  • Sample

    240519-zymmysab2t

  • MD5

    39ca736d5deda9f5e72721fc6d3db4d0

  • SHA1

    df46024f7d7b39b35d424b1bf2b859452f8cf8fe

  • SHA256

    5f1d183e62008c4ae71b1770c0040353dfa1eb34cb544f13c9a4d69701847245

  • SHA512

    92ec9d5a26b256bc76c6e02ffb988df0954528dc7c4b2edf48f8795f59145af5ffdb84e26f736fe7aaaf5c0346dfb72dd96e773e16996a7639c7a055633767ea

  • SSDEEP

    3072:hjl5INwu0H7W1yg5w0IjzGYJpD9r8XxrYnQg4sI+:hKwu0baB5w0IXGyZ6Yu+

Score
10/10
persistence

Malware Config

Targets

    • Target

      39ca736d5deda9f5e72721fc6d3db4d0_NeikiAnalytics.exe

    • Size

      144KB

    • MD5

      39ca736d5deda9f5e72721fc6d3db4d0

    • SHA1

      df46024f7d7b39b35d424b1bf2b859452f8cf8fe

    • SHA256

      5f1d183e62008c4ae71b1770c0040353dfa1eb34cb544f13c9a4d69701847245

    • SHA512

      92ec9d5a26b256bc76c6e02ffb988df0954528dc7c4b2edf48f8795f59145af5ffdb84e26f736fe7aaaf5c0346dfb72dd96e773e16996a7639c7a055633767ea

    • SSDEEP

      3072:hjl5INwu0H7W1yg5w0IjzGYJpD9r8XxrYnQg4sI+:hKwu0baB5w0IXGyZ6Yu+

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks