Overview

overview

10

Static

static

3

50f4417008...cs.exe

windows7-x64

10

50f4417008...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50f441700855e6bfde68db2438f29c90_NeikiAnalytics.exe

  • Size

    80KB

  • Sample

    240522-2sqhrsca4v

  • MD5

    50f441700855e6bfde68db2438f29c90

  • SHA1

    5604aeb4a5e30cf41c41574f1b75e46761f22dd1

  • SHA256

    a7897b7849c31d7c848b6917ddbcb5c00e19ccbf4aa5ec23cca359b12263243d

  • SHA512

    e05fea02a740362af8b515ab39c634f81a6551723b4b618745a8d8e2160e3e31efc2e98d9eef72a5e177bda04de075ed58d698a0ee7226d3a0954235e44ef9d4

  • SSDEEP

    1536:uOS+7vfuNUQIyvcu4F+hxj+aKkQiZcoGsRQnR/RgpMujAYC+O+Y:Z7YZ0u4FCXKkQUcZsenVqLAYC+O+Y

Score
10/10
persistence

Malware Config

Targets

    • Target

      50f441700855e6bfde68db2438f29c90_NeikiAnalytics.exe

    • Size

      80KB

    • MD5

      50f441700855e6bfde68db2438f29c90

    • SHA1

      5604aeb4a5e30cf41c41574f1b75e46761f22dd1

    • SHA256

      a7897b7849c31d7c848b6917ddbcb5c00e19ccbf4aa5ec23cca359b12263243d

    • SHA512

      e05fea02a740362af8b515ab39c634f81a6551723b4b618745a8d8e2160e3e31efc2e98d9eef72a5e177bda04de075ed58d698a0ee7226d3a0954235e44ef9d4

    • SSDEEP

      1536:uOS+7vfuNUQIyvcu4F+hxj+aKkQiZcoGsRQnR/RgpMujAYC+O+Y:Z7YZ0u4FCXKkQUcZsenVqLAYC+O+Y

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks