Overview

overview

10

Static

static

7

5d49ba9277...cs.exe

windows7-x64

10

5d49ba9277...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d49ba92772003a005f96dc23ca25a20_NeikiAnalytics.exe

  • Size

    71KB

  • Sample

    240522-3z3x4sdh7v

  • MD5

    5d49ba92772003a005f96dc23ca25a20

  • SHA1

    81e95b04bfa4e837ce9e0c5bec7adf74afb66ec9

  • SHA256

    e0630d251cb811fe4a53859c0ee91c1389f1f5be47216594efaf534f1f443f27

  • SHA512

    b350f45a21a068210c44044f2e1ae47b8453edc1a01fb298028a14b0343f43a6d4f77eb2f5a9256d1aeaad913d831135a0c86d409f4d4193fefda04b274f09cb

  • SSDEEP

    768:EXKeT2Si83nLt8tkGX8uxOHgRrW5YLKG9Y/HrSNm0kmG7xMsVAnc3yy85SBiLFMc:EFrmh0HgB3LKrL9AcnQFMc9zwR6i+BT

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      5d49ba92772003a005f96dc23ca25a20_NeikiAnalytics.exe

    • Size

      71KB

    • MD5

      5d49ba92772003a005f96dc23ca25a20

    • SHA1

      81e95b04bfa4e837ce9e0c5bec7adf74afb66ec9

    • SHA256

      e0630d251cb811fe4a53859c0ee91c1389f1f5be47216594efaf534f1f443f27

    • SHA512

      b350f45a21a068210c44044f2e1ae47b8453edc1a01fb298028a14b0343f43a6d4f77eb2f5a9256d1aeaad913d831135a0c86d409f4d4193fefda04b274f09cb

    • SSDEEP

      768:EXKeT2Si83nLt8tkGX8uxOHgRrW5YLKG9Y/HrSNm0kmG7xMsVAnc3yy85SBiLFMc:EFrmh0HgB3LKrL9AcnQFMc9zwR6i+BT

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks