Overview

overview

10

Static

static

3

439dd41976...cs.exe

windows7-x64

10

439dd41976...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    439dd41976b82dad882561246050d170_NeikiAnalytics.exe

  • Size

    24KB

  • Sample

    240522-1l9gmaab34

  • MD5

    439dd41976b82dad882561246050d170

  • SHA1

    c4f5cfc943af75f23b3349b386c040ecad7e9378

  • SHA256

    81f52c5c91929b21526a2d4cea1b22affe052e3f3fab15850c833011fecf50e6

  • SHA512

    de60f4c435b991c9b81925ea2e0d8bddca7cac4cecd9602a4387542436d571f2d95513a35289252b84ce3b604f4862cfebfe44b29e2fd61325fc50c8a6459a8f

  • SSDEEP

    768:jIUAjUnzqUgF1ITpnE1RevhteQsQqKtzIb:jajKzqUOKnYV7Qqe8b

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      439dd41976b82dad882561246050d170_NeikiAnalytics.exe

    • Size

      24KB

    • MD5

      439dd41976b82dad882561246050d170

    • SHA1

      c4f5cfc943af75f23b3349b386c040ecad7e9378

    • SHA256

      81f52c5c91929b21526a2d4cea1b22affe052e3f3fab15850c833011fecf50e6

    • SHA512

      de60f4c435b991c9b81925ea2e0d8bddca7cac4cecd9602a4387542436d571f2d95513a35289252b84ce3b604f4862cfebfe44b29e2fd61325fc50c8a6459a8f

    • SSDEEP

      768:jIUAjUnzqUgF1ITpnE1RevhteQsQqKtzIb:jajKzqUOKnYV7Qqe8b

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks