Overview

overview

10

Static

static

3

14d3cd8f81...cs.exe

windows7-x64

10

14d3cd8f81...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14d3cd8f81d800d5015b90022f765a40_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240522-c9wnnsaa9v

  • MD5

    14d3cd8f81d800d5015b90022f765a40

  • SHA1

    1b765e3f0da75fb04ee5824b8aea9443ae665393

  • SHA256

    63d2f8129634390f5de6754899f61e3f1c4f8e1d8cdaf3beb6f3e32414e1d247

  • SHA512

    cd14c8a63157269b6fd491512f30c6ad4f7795a18afd865db0548d5aa11f759d830c91257b106e501b17b083d2423d2fa1415af2ba855b443ddbd424eda921ba

  • SSDEEP

    1536:xA80j8XBulvaVEm+odQpNjoCj2HileSpnt7xQaZUnCZgKQQPu:S8qD96xdKoCj2HioSpnt7xQaZUPQ2

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      14d3cd8f81d800d5015b90022f765a40_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      14d3cd8f81d800d5015b90022f765a40

    • SHA1

      1b765e3f0da75fb04ee5824b8aea9443ae665393

    • SHA256

      63d2f8129634390f5de6754899f61e3f1c4f8e1d8cdaf3beb6f3e32414e1d247

    • SHA512

      cd14c8a63157269b6fd491512f30c6ad4f7795a18afd865db0548d5aa11f759d830c91257b106e501b17b083d2423d2fa1415af2ba855b443ddbd424eda921ba

    • SSDEEP

      1536:xA80j8XBulvaVEm+odQpNjoCj2HileSpnt7xQaZUnCZgKQQPu:S8qD96xdKoCj2HioSpnt7xQaZUPQ2

    Score
    10/10
    evasionpersistencetrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Defense Evasion

Impair Defenses

2
T1562

Disable or Modify Tools

2
T1562.001

Modify Registry

5
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks