Overview

overview

10

Static

static

3

4ef23da3bf...cs.exe

windows7-x64

10

4ef23da3bf...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ef23da3bf93c246a67bfde9edf48520_NeikiAnalytics.exe

  • Size

    899KB

  • Sample

    240522-2m3k5sbg98

  • MD5

    4ef23da3bf93c246a67bfde9edf48520

  • SHA1

    93c069d10d0fa4e949084deecf963d4aec783919

  • SHA256

    82332ac061f8bea23a8f3e7f26625389f636c99db321f0a3fd840699c692cb51

  • SHA512

    64735d7f7bdab6a37fd8773c521d8cc75543d96418bc85628ac37113391b4f4244de8029aac0aa22a8ea2a5dae709fefa90067214b5756f7321a5616bb8262e6

  • SSDEEP

    6144:gDCwfqDCwfyDDCwfazODCwfqDCwfyDDCwfaz7:g7q7yD7azO7q7yD7az7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4ef23da3bf93c246a67bfde9edf48520_NeikiAnalytics.exe

    • Size

      899KB

    • MD5

      4ef23da3bf93c246a67bfde9edf48520

    • SHA1

      93c069d10d0fa4e949084deecf963d4aec783919

    • SHA256

      82332ac061f8bea23a8f3e7f26625389f636c99db321f0a3fd840699c692cb51

    • SHA512

      64735d7f7bdab6a37fd8773c521d8cc75543d96418bc85628ac37113391b4f4244de8029aac0aa22a8ea2a5dae709fefa90067214b5756f7321a5616bb8262e6

    • SSDEEP

      6144:gDCwfqDCwfyDDCwfazODCwfqDCwfyDDCwfaz7:g7q7yD7azO7q7yD7az7

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks