Overview

overview

10

Static

static

3

3f7bc18c81...cs.exe

windows7-x64

10

3f7bc18c81...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f7bc18c8150bf21bc5bf00eaa913f80_NeikiAnalytics.exe

  • Size

    45KB

  • Sample

    240522-z9tweahd94

  • MD5

    3f7bc18c8150bf21bc5bf00eaa913f80

  • SHA1

    c3bc25bce0379b525ba9cda815c6a0bee7dad85a

  • SHA256

    4e21f580a2534ee583ac82f37b0303802e6b16e9faca1f8e64465a5b14a012f2

  • SHA512

    869b647e5531077a196ffb7c02d7fb5681a9135bb325d5ac5f480d210aa3fba377a266729b3e6114cc3240e71e0ecd446031e62f00b6e6a0126fd58cee122f83

  • SSDEEP

    768:PmFQj8rM9whcqet8WfuzHVHFNNqDaG0XjqGoxhz/8szBnP7DFK+5nEiq:FAwEmBGz1lNNqDaG0Poxhlzmiq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3f7bc18c8150bf21bc5bf00eaa913f80_NeikiAnalytics.exe

    • Size

      45KB

    • MD5

      3f7bc18c8150bf21bc5bf00eaa913f80

    • SHA1

      c3bc25bce0379b525ba9cda815c6a0bee7dad85a

    • SHA256

      4e21f580a2534ee583ac82f37b0303802e6b16e9faca1f8e64465a5b14a012f2

    • SHA512

      869b647e5531077a196ffb7c02d7fb5681a9135bb325d5ac5f480d210aa3fba377a266729b3e6114cc3240e71e0ecd446031e62f00b6e6a0126fd58cee122f83

    • SSDEEP

      768:PmFQj8rM9whcqet8WfuzHVHFNNqDaG0XjqGoxhz/8szBnP7DFK+5nEiq:FAwEmBGz1lNNqDaG0Poxhlzmiq

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables use of System Restore points

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks