Overview

overview

7

Static

static

3

0a1e322ad0...cs.exe

windows7-x64

7

0a1e322ad0...cs.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a1e322ad0bf956450cd77ec9312c580_NeikiAnalytics.exe

  • Size

    3.1MB

  • Sample

    240521-zfngjahf67

  • MD5

    0a1e322ad0bf956450cd77ec9312c580

  • SHA1

    c8a18924e53dbfe3add142b0c789664306d3ffd0

  • SHA256

    323c173b9ce2a213d9914f757d433710f424d784a077e7d2acba969108402f73

  • SHA512

    152cbe0d49ef1ce53f4eae419c010322946833793883a614c432fd917195635220d612f0f77e9cff6698f49a1eeeca84ae8bf2f5a58efa1d9bd4e8ebdf8f4132

  • SSDEEP

    49152:Bdx56xYcIcuHcKAH2IgGXikE2I6wdD1weda4NVk4aNp:Bd6x/IcuHcKAHfnEqwdDioa4NSp

Score
7/10
persistence

Malware Config

Targets

    • Target

      0a1e322ad0bf956450cd77ec9312c580_NeikiAnalytics.exe

    • Size

      3.1MB

    • MD5

      0a1e322ad0bf956450cd77ec9312c580

    • SHA1

      c8a18924e53dbfe3add142b0c789664306d3ffd0

    • SHA256

      323c173b9ce2a213d9914f757d433710f424d784a077e7d2acba969108402f73

    • SHA512

      152cbe0d49ef1ce53f4eae419c010322946833793883a614c432fd917195635220d612f0f77e9cff6698f49a1eeeca84ae8bf2f5a58efa1d9bd4e8ebdf8f4132

    • SSDEEP

      49152:Bdx56xYcIcuHcKAH2IgGXikE2I6wdD1weda4NVk4aNp:Bd6x/IcuHcKAHfnEqwdDioa4NSp

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks