Overview

overview

7

Static

static

3

15ffb51a6c...cs.exe

windows7-x64

7

15ffb51a6c...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15ffb51a6c236f77918597bb424b4d10_NeikiAnalytics.exe

  • Size

    408KB

  • Sample

    240522-eapgesbb4s

  • MD5

    15ffb51a6c236f77918597bb424b4d10

  • SHA1

    b5b5cf507b56a1544f90e9b1cdaa0a55c8bca735

  • SHA256

    28f013332195b5e8fc2d9a823a951d09dfe2bae4e67c11b44f9cabf16d817a83

  • SHA512

    7f90d7ed2a946ee63dca3e0b84a1a41b025c191d8c21d1d0d009658bc124074ced162c3480a80d1d90558d33cae9e9011f90ec7e95d304736d3c49b68cd855d5

  • SSDEEP

    12288:4jauDReWdj0UOak2RApGsaeGvs0ZL+dOyaeYfB:4DDR0UOak2RIjGv3ZL+dOyaxfB

Score
7/10
persistence

Malware Config

Targets

    • Target

      15ffb51a6c236f77918597bb424b4d10_NeikiAnalytics.exe

    • Size

      408KB

    • MD5

      15ffb51a6c236f77918597bb424b4d10

    • SHA1

      b5b5cf507b56a1544f90e9b1cdaa0a55c8bca735

    • SHA256

      28f013332195b5e8fc2d9a823a951d09dfe2bae4e67c11b44f9cabf16d817a83

    • SHA512

      7f90d7ed2a946ee63dca3e0b84a1a41b025c191d8c21d1d0d009658bc124074ced162c3480a80d1d90558d33cae9e9011f90ec7e95d304736d3c49b68cd855d5

    • SSDEEP

      12288:4jauDReWdj0UOak2RApGsaeGvs0ZL+dOyaeYfB:4DDR0UOak2RIjGv3ZL+dOyaxfB

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks