Overview

overview

10

Static

static

3

51a9d87652...cs.exe

windows7-x64

10

51a9d87652...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51a9d876524dc7c884a5b3d0e6123b90_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240522-2v13aacb4z

  • MD5

    51a9d876524dc7c884a5b3d0e6123b90

  • SHA1

    f406dfe33b715a9a2744a5f00478ba9b9ad4ee17

  • SHA256

    93fa9cc7ec78e0c198e680677dbd35e1493bbc5860c262e29f3ba66e24d7c1ae

  • SHA512

    6b9724f351a2792aa275403f15e36497a2b67df5e068ee4eafff765ba75936dc6015a0aa34bfd7b43982d8ce2d6c0439ccad8e06c70259ffb884890399d36f0e

  • SSDEEP

    1536:vNLg8r8QCml3nP7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:UmlXPJJjmLM3zRJWZsXy4J9

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      51a9d876524dc7c884a5b3d0e6123b90_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      51a9d876524dc7c884a5b3d0e6123b90

    • SHA1

      f406dfe33b715a9a2744a5f00478ba9b9ad4ee17

    • SHA256

      93fa9cc7ec78e0c198e680677dbd35e1493bbc5860c262e29f3ba66e24d7c1ae

    • SHA512

      6b9724f351a2792aa275403f15e36497a2b67df5e068ee4eafff765ba75936dc6015a0aa34bfd7b43982d8ce2d6c0439ccad8e06c70259ffb884890399d36f0e

    • SSDEEP

      1536:vNLg8r8QCml3nP7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:UmlXPJJjmLM3zRJWZsXy4J9

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks