Overview

overview

8

Static

static

3

3797826ad5...cs.exe

windows7-x64

8

3797826ad5...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3797826ad5f0e02b68a9be8a85d24420_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240522-zkbcrsga97

  • MD5

    3797826ad5f0e02b68a9be8a85d24420

  • SHA1

    8006fbf5ae2b740c26533f76ee77fd92be46c580

  • SHA256

    b61fef75e35dbfe215c5dc51eee277c7b7ad676d8200d8ca638f5c399f8cce82

  • SHA512

    3be887fe2a066a879290d805d4541d79c5e2443079203dbec32f71ea434559d22e6bb1b365e8562de9b95495d4b4138277879990fdd657a13cee126358e7a5a7

  • SSDEEP

    24576:NgXkeGFgXR1q52AvtMq6vgOiL3oWkunEMrmjRNEVQEPFdzLZjRT4YB6PXXx:vdVvtMq6vgh3oWPEBjRqXdfZyXh

Score
8/10
persistence

Malware Config

Targets

    • Target

      3797826ad5f0e02b68a9be8a85d24420_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      3797826ad5f0e02b68a9be8a85d24420

    • SHA1

      8006fbf5ae2b740c26533f76ee77fd92be46c580

    • SHA256

      b61fef75e35dbfe215c5dc51eee277c7b7ad676d8200d8ca638f5c399f8cce82

    • SHA512

      3be887fe2a066a879290d805d4541d79c5e2443079203dbec32f71ea434559d22e6bb1b365e8562de9b95495d4b4138277879990fdd657a13cee126358e7a5a7

    • SSDEEP

      24576:NgXkeGFgXR1q52AvtMq6vgOiL3oWkunEMrmjRNEVQEPFdzLZjRT4YB6PXXx:vdVvtMq6vgh3oWPEBjRqXdfZyXh

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

Peripheral Device Discovery

2
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks