Overview

overview

10

Static

static

7

48d6f73ccd...cs.exe

windows7-x64

10

48d6f73ccd...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48d6f73ccddfce26179ab92bda48e7c0_NeikiAnalytics.exe

  • Size

    51KB

  • Sample

    240522-13wbbsah43

  • MD5

    48d6f73ccddfce26179ab92bda48e7c0

  • SHA1

    fd20816be90ef1f75c52abd1e1f8ab23085736af

  • SHA256

    e86b86c06a6e1cf0c6ee57387048e354f6eac4b59a3f5f50e24a5a246f185bec

  • SHA512

    af7e045017a206fcf9028374aa2e5bd1bb0417f9dc9a1a0fddd6698c355d65f2452b314d761c58ceefb3fd820ef8652db456f4f70aabde167a9febb36ed7763a

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3z:nNJb/HkwoLe29UjQ4wqQOLIMVnS3z

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      48d6f73ccddfce26179ab92bda48e7c0_NeikiAnalytics.exe

    • Size

      51KB

    • MD5

      48d6f73ccddfce26179ab92bda48e7c0

    • SHA1

      fd20816be90ef1f75c52abd1e1f8ab23085736af

    • SHA256

      e86b86c06a6e1cf0c6ee57387048e354f6eac4b59a3f5f50e24a5a246f185bec

    • SHA512

      af7e045017a206fcf9028374aa2e5bd1bb0417f9dc9a1a0fddd6698c355d65f2452b314d761c58ceefb3fd820ef8652db456f4f70aabde167a9febb36ed7763a

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3z:nNJb/HkwoLe29UjQ4wqQOLIMVnS3z

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks