Overview

overview

10

Static

static

3

296c6f9839...cs.exe

windows7-x64

10

296c6f9839...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    296c6f9839685b4173ac7817a0238d1863804edcbb608a36c3b316c661cf17b5_NeikiAnalytics

  • Size

    295KB

  • Sample

    240521-k58rfafg77

  • MD5

    c3560ebf689b02434223b70cbe7f9e90

  • SHA1

    067ae6d339e5b488e0449065567b89eafce6638c

  • SHA256

    296c6f9839685b4173ac7817a0238d1863804edcbb608a36c3b316c661cf17b5

  • SHA512

    c5098734051b378fc9c0e99af5967486550470d8c9ee6986acb132f7ff08604cb9a33341c441f3888833534b72f51f1c933bb20ac8f7467ee01b378d3e283f5d

  • SSDEEP

    3072:iDyurkqxw5pMjh2VrtYKYrpBwHT0jY7lY7M+NYgTPB:srkJVrWXrpiCo+BTPB

Score
10/10
persistence

Malware Config

Targets

    • Target

      296c6f9839685b4173ac7817a0238d1863804edcbb608a36c3b316c661cf17b5_NeikiAnalytics

    • Size

      295KB

    • MD5

      c3560ebf689b02434223b70cbe7f9e90

    • SHA1

      067ae6d339e5b488e0449065567b89eafce6638c

    • SHA256

      296c6f9839685b4173ac7817a0238d1863804edcbb608a36c3b316c661cf17b5

    • SHA512

      c5098734051b378fc9c0e99af5967486550470d8c9ee6986acb132f7ff08604cb9a33341c441f3888833534b72f51f1c933bb20ac8f7467ee01b378d3e283f5d

    • SSDEEP

      3072:iDyurkqxw5pMjh2VrtYKYrpBwHT0jY7lY7M+NYgTPB:srkJVrWXrpiCo+BTPB

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks