Overview

overview

8

Static

static

1

3ef6dc8816...cs.dll

windows7-x64

7

3ef6dc8816...cs.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ef6dc8816093d9a0c65a2438a559820_NeikiAnalytics.exe

  • Size

    223KB

  • Sample

    240522-z76r7ahb81

  • MD5

    3ef6dc8816093d9a0c65a2438a559820

  • SHA1

    83ca55b63d6298ca2b4913656be06de56f0980d2

  • SHA256

    b7f3c7d122e0b672e7e83a04ee1e42e4b076f8d4ca9a7972a95aec09a45da7d0

  • SHA512

    d9e1c24c44de8280fd79879c3d76c57b2b1684930251837f7c5830b0f8897f3ec1f30f5c7aafa0649e0b7d2b685fafb5dcec9e34fc5b4ea1ca67d45f60f8baca

  • SSDEEP

    3072:6huf5AUWGIcvgJvK2agufC3ZdlGZxIOtY81fs2lQBV+UdE+rECWp7hKpX:ZBAUWGIVagufCALIBV+UdvrEFp7hKp

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      3ef6dc8816093d9a0c65a2438a559820_NeikiAnalytics.exe

    • Size

      223KB

    • MD5

      3ef6dc8816093d9a0c65a2438a559820

    • SHA1

      83ca55b63d6298ca2b4913656be06de56f0980d2

    • SHA256

      b7f3c7d122e0b672e7e83a04ee1e42e4b076f8d4ca9a7972a95aec09a45da7d0

    • SHA512

      d9e1c24c44de8280fd79879c3d76c57b2b1684930251837f7c5830b0f8897f3ec1f30f5c7aafa0649e0b7d2b685fafb5dcec9e34fc5b4ea1ca67d45f60f8baca

    • SSDEEP

      3072:6huf5AUWGIcvgJvK2agufC3ZdlGZxIOtY81fs2lQBV+UdE+rECWp7hKpX:ZBAUWGIVagufCALIBV+UdvrEFp7hKp

    Score
    8/10
    upxpersistence

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks