General

  • Target

    64de21911290806d06c7e6cbfd502490_NeikiAnalytics.exe

  • Size

    133KB

  • Sample

    240523-a37q9afb8y

  • MD5

    64de21911290806d06c7e6cbfd502490

  • SHA1

    c4eb493760ab9d599503158920dd30f4d67308a6

  • SHA256

    54f560fbd8270eef17dcf43ab4dbb0f6faca578edf4bdc6002822d40938f0b4c

  • SHA512

    5d29845e93a57161f4ff01c214db17d1a51ce636449eb2158197e133fb6e5c174fc2a2531c98441373a1d0dc97569f60b5fbcba0ae3f5dcfa7e62c34bbe1dabb

  • SSDEEP

    3072:+EboFVlGAvwsgbpvYfMTc72L10fPsout6nnn:9BzsgbpvnTcyOPsoS6nnn

Score
7/10
upx

Malware Config

Targets

    • Target

      64de21911290806d06c7e6cbfd502490_NeikiAnalytics.exe

    • Size

      133KB

    • MD5

      64de21911290806d06c7e6cbfd502490

    • SHA1

      c4eb493760ab9d599503158920dd30f4d67308a6

    • SHA256

      54f560fbd8270eef17dcf43ab4dbb0f6faca578edf4bdc6002822d40938f0b4c

    • SHA512

      5d29845e93a57161f4ff01c214db17d1a51ce636449eb2158197e133fb6e5c174fc2a2531c98441373a1d0dc97569f60b5fbcba0ae3f5dcfa7e62c34bbe1dabb

    • SSDEEP

      3072:+EboFVlGAvwsgbpvYfMTc72L10fPsout6nnn:9BzsgbpvnTcyOPsoS6nnn

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks