Overview

overview

10

Static

static

3

badd74e01c...cs.exe

windows7-x64

10

badd74e01c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    badd74e01cdef3cfd8029f5a6f114120_NeikiAnalytics.exe

  • Size

    100KB

  • Sample

    240520-gbt5eaee5z

  • MD5

    badd74e01cdef3cfd8029f5a6f114120

  • SHA1

    fbef7b3b4fda4c31135ed501660a2a3e9045ddd8

  • SHA256

    c8e051a9dc10ceee8745c362d3459d155f2d25d22373e7b8722f920741338831

  • SHA512

    8ffccf460de7b8c5109313702f8dc5aa1dd063fae4ff8c2ea2af3a06312e4229603a01ae9bdc738a1a4c0c0baa057351ba5af67a054fe5ef2a881234049ef273

  • SSDEEP

    3072:jIJ6Zvz3vf/zO0YgIRjPqNQjN0saagb3a3+X13XRzT:jy6TH/qhj1jOsaT7aOl3BzT

Score
10/10
persistence

Malware Config

Targets

    • Target

      badd74e01cdef3cfd8029f5a6f114120_NeikiAnalytics.exe

    • Size

      100KB

    • MD5

      badd74e01cdef3cfd8029f5a6f114120

    • SHA1

      fbef7b3b4fda4c31135ed501660a2a3e9045ddd8

    • SHA256

      c8e051a9dc10ceee8745c362d3459d155f2d25d22373e7b8722f920741338831

    • SHA512

      8ffccf460de7b8c5109313702f8dc5aa1dd063fae4ff8c2ea2af3a06312e4229603a01ae9bdc738a1a4c0c0baa057351ba5af67a054fe5ef2a881234049ef273

    • SSDEEP

      3072:jIJ6Zvz3vf/zO0YgIRjPqNQjN0saagb3a3+X13XRzT:jy6TH/qhj1jOsaT7aOl3BzT

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks