Overview

overview

10

Static

static

3

5bb744bb24...cs.exe

windows7-x64

10

5bb744bb24...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bb744bb24ecae9c9d4afc3b0725a540_NeikiAnalytics.exe

  • Size

    336KB

  • Sample

    240522-3t8leadg2s

  • MD5

    5bb744bb24ecae9c9d4afc3b0725a540

  • SHA1

    6d294ca174a7871e1209f57254d38c985a0d09b6

  • SHA256

    0b12d79d944342b869e0aa50c383f8374d2105495cd445f3420e02501cdf8d30

  • SHA512

    f72b1a1512814aaa5e82c234a3cfb4aef9e6fb5005aa577d3e98e6c69117f18f78f781a21252852eb27b25d8b95fb16a5999a72f574193b7347381e433ee6d57

  • SSDEEP

    6144:utEZSV5q+owv7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOE:uSl+oi7aOlxzr3cOK3Taj

Score
10/10
persistence

Malware Config

Targets

    • Target

      5bb744bb24ecae9c9d4afc3b0725a540_NeikiAnalytics.exe

    • Size

      336KB

    • MD5

      5bb744bb24ecae9c9d4afc3b0725a540

    • SHA1

      6d294ca174a7871e1209f57254d38c985a0d09b6

    • SHA256

      0b12d79d944342b869e0aa50c383f8374d2105495cd445f3420e02501cdf8d30

    • SHA512

      f72b1a1512814aaa5e82c234a3cfb4aef9e6fb5005aa577d3e98e6c69117f18f78f781a21252852eb27b25d8b95fb16a5999a72f574193b7347381e433ee6d57

    • SSDEEP

      6144:utEZSV5q+owv7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOE:uSl+oi7aOlxzr3cOK3Taj

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks