Overview

overview

10

Static

static

3

5962c117eb...cs.exe

windows7-x64

10

5962c117eb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5962c117eb1df6cb926a2755e81e95b0_NeikiAnalytics.exe

  • Size

    91KB

  • Sample

    240522-3l9thadd5z

  • MD5

    5962c117eb1df6cb926a2755e81e95b0

  • SHA1

    9c0ac139ff6179b984a6a03587d805cec98f6fc0

  • SHA256

    71af9668af296c05e01a3b76d12d92e0a2aded6f561acf43c7465b29b65fa7ee

  • SHA512

    2382427a90eb55b0ccd4d62863079a80b83fd36f3c608f9afa06bcbc732b45be1ee34fc0daf7c0caf6eb29a2aa44fad7b0f0f0b1a6f3e655a7f8bef9eb991476

  • SSDEEP

    1536:FAwEmBGz1lNNqDaG0PoxhlzmqAwEmBGz1lNNqDaG0Poxhlzm+:FGmUXNQDaG0A8qGmUXNQDaG0A8+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5962c117eb1df6cb926a2755e81e95b0_NeikiAnalytics.exe

    • Size

      91KB

    • MD5

      5962c117eb1df6cb926a2755e81e95b0

    • SHA1

      9c0ac139ff6179b984a6a03587d805cec98f6fc0

    • SHA256

      71af9668af296c05e01a3b76d12d92e0a2aded6f561acf43c7465b29b65fa7ee

    • SHA512

      2382427a90eb55b0ccd4d62863079a80b83fd36f3c608f9afa06bcbc732b45be1ee34fc0daf7c0caf6eb29a2aa44fad7b0f0f0b1a6f3e655a7f8bef9eb991476

    • SSDEEP

      1536:FAwEmBGz1lNNqDaG0PoxhlzmqAwEmBGz1lNNqDaG0Poxhlzm+:FGmUXNQDaG0A8qGmUXNQDaG0A8+

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables use of System Restore points

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks