Overview

overview

8

Static

static

7

5879ef1b37...cs.exe

windows7-x64

8

5879ef1b37...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5879ef1b37928890e9e7450e6a5baaa0_NeikiAnalytics.exe

  • Size

    54KB

  • Sample

    240522-3hwsgadc3w

  • MD5

    5879ef1b37928890e9e7450e6a5baaa0

  • SHA1

    121010312154ddeb8320a991a210a18ac63a1f89

  • SHA256

    419ec89845269d8d99bc7b7397d2d7633ff8d5775726baf71f7824ea1647a42b

  • SHA512

    cac00f9ae2bc8fd07aec937c033c77f10a50f532210fd76c032a44e1e19d65f7bf3246b28142b80071a7a1e8a1abaebfc7560c13bd22dbfe4a331bd8f4dc35d9

  • SSDEEP

    384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiih:3DcZyUpULCgod/J96ayXv/pWnnA2

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      5879ef1b37928890e9e7450e6a5baaa0_NeikiAnalytics.exe

    • Size

      54KB

    • MD5

      5879ef1b37928890e9e7450e6a5baaa0

    • SHA1

      121010312154ddeb8320a991a210a18ac63a1f89

    • SHA256

      419ec89845269d8d99bc7b7397d2d7633ff8d5775726baf71f7824ea1647a42b

    • SHA512

      cac00f9ae2bc8fd07aec937c033c77f10a50f532210fd76c032a44e1e19d65f7bf3246b28142b80071a7a1e8a1abaebfc7560c13bd22dbfe4a331bd8f4dc35d9

    • SSDEEP

      384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiih:3DcZyUpULCgod/J96ayXv/pWnnA2

    Score
    8/10
    evasionupx

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks