Overview

overview

10

Static

static

7

8cfafba35a...cs.exe

windows7-x64

10

8cfafba35a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8cfafba35accf31834b10f9b8e6a7730_NeikiAnalytics.exe

  • Size

    225KB

  • Sample

    240520-crjamaff6y

  • MD5

    8cfafba35accf31834b10f9b8e6a7730

  • SHA1

    961c401954973527c9cca9a6b2bd13905119cb27

  • SHA256

    35042c4a1bf6f73a4f506ff33518d890f6aacb32b2ce50451340f76dc9d910c7

  • SHA512

    9a2dc983d11f040b2cb77126bbcad5e0d6de2f386dd08f0511907b1dd93992fcf2871b15c928dbee994344a4c8ce85dfc009f03cd0f36c043f81ed401471b4d4

  • SSDEEP

    6144:8vEN2U+T6i5LirrllHy4HUcMQY6vMSxoooooooooooooooooooooooooooooooop:OENN+T5xYrllrU7QY6foooooooooooop

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      8cfafba35accf31834b10f9b8e6a7730_NeikiAnalytics.exe

    • Size

      225KB

    • MD5

      8cfafba35accf31834b10f9b8e6a7730

    • SHA1

      961c401954973527c9cca9a6b2bd13905119cb27

    • SHA256

      35042c4a1bf6f73a4f506ff33518d890f6aacb32b2ce50451340f76dc9d910c7

    • SHA512

      9a2dc983d11f040b2cb77126bbcad5e0d6de2f386dd08f0511907b1dd93992fcf2871b15c928dbee994344a4c8ce85dfc009f03cd0f36c043f81ed401471b4d4

    • SSDEEP

      6144:8vEN2U+T6i5LirrllHy4HUcMQY6vMSxoooooooooooooooooooooooooooooooop:OENN+T5xYrllrU7QY6foooooooooooop

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks