Overview

overview

8

Static

static

1

5b3a89992a...cs.dll

windows7-x64

8

5b3a89992a...cs.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b3a89992af759c07fafacfca860b470_NeikiAnalytics.exe

  • Size

    540KB

  • Sample

    240522-3sxshsdf6w

  • MD5

    5b3a89992af759c07fafacfca860b470

  • SHA1

    94a1b4fb1f73bf7f6de2b161a6504b9ffe6765a3

  • SHA256

    6c92d90739185fe8b2fa02d05b48be8b6b28a7a56bef79cca8671ab6b8179e22

  • SHA512

    f43d7e17cbcc3e277d6a4e83e69f2270100a438909d228a93bf02673386eca30e0fccb24130f70e6b085412d955d7d66cb9d899d200c299414ca647f67dd67f9

  • SSDEEP

    6144:ptRuzt1XSqSpRphKXsUy/vXYzw4mW9gxlFy2vPr0vUHkmivlrwcLoQBV+UdvrEFy:pHAqfzK/yT4sycPr0mKdBjvrEH7d2

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      5b3a89992af759c07fafacfca860b470_NeikiAnalytics.exe

    • Size

      540KB

    • MD5

      5b3a89992af759c07fafacfca860b470

    • SHA1

      94a1b4fb1f73bf7f6de2b161a6504b9ffe6765a3

    • SHA256

      6c92d90739185fe8b2fa02d05b48be8b6b28a7a56bef79cca8671ab6b8179e22

    • SHA512

      f43d7e17cbcc3e277d6a4e83e69f2270100a438909d228a93bf02673386eca30e0fccb24130f70e6b085412d955d7d66cb9d899d200c299414ca647f67dd67f9

    • SSDEEP

      6144:ptRuzt1XSqSpRphKXsUy/vXYzw4mW9gxlFy2vPr0vUHkmivlrwcLoQBV+UdvrEFy:pHAqfzK/yT4sycPr0mKdBjvrEH7d2

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks