Overview

overview

10

Static

static

3

644fd23ee6...cs.exe

windows7-x64

10

644fd23ee6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    644fd23ee6927c27728e01d07aa57070_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240523-a2d3jsfc65

  • MD5

    644fd23ee6927c27728e01d07aa57070

  • SHA1

    ac3b4188998c0d150163dcd80961b1544bdbcd9d

  • SHA256

    2e0a446640fcb764e01287716148442f1fd2371f73e429086250625267ac33ec

  • SHA512

    6118f9a0f5bb2c50dc85362b1c0cd59c959927c3e3550bb53dcbf45bac42dbdd4dcc122bb32ceb660fbecc949c5293f2de42d626f026ae80b9240b3aa419281c

  • SSDEEP

    1536:xDytoYTXnoFxGjYUsWIYUzubBMiIt4S/7SCEZQcRKCO9VYQKKKuNTU:eFTh9MiW4euTQcIVVYHeNY

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      644fd23ee6927c27728e01d07aa57070_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      644fd23ee6927c27728e01d07aa57070

    • SHA1

      ac3b4188998c0d150163dcd80961b1544bdbcd9d

    • SHA256

      2e0a446640fcb764e01287716148442f1fd2371f73e429086250625267ac33ec

    • SHA512

      6118f9a0f5bb2c50dc85362b1c0cd59c959927c3e3550bb53dcbf45bac42dbdd4dcc122bb32ceb660fbecc949c5293f2de42d626f026ae80b9240b3aa419281c

    • SSDEEP

      1536:xDytoYTXnoFxGjYUsWIYUzubBMiIt4S/7SCEZQcRKCO9VYQKKKuNTU:eFTh9MiW4euTQcIVVYHeNY

    Score
    10/10
    evasionpersistencetrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Defense Evasion

Impair Defenses

2
T1562

Disable or Modify Tools

2
T1562.001

Modify Registry

5
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks