Overview

overview

10

Static

static

3

6551d8e2e6...cs.exe

windows7-x64

10

6551d8e2e6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6551d8e2e6bcca22a489932ca22ee290_NeikiAnalytics.exe

  • Size

    256KB

  • Sample

    240523-a5e41sfc5v

  • MD5

    6551d8e2e6bcca22a489932ca22ee290

  • SHA1

    eeb6682955d6c29d9e80257420b5781d551a17ae

  • SHA256

    9e571d67ae346044d6893ead28e965a8532c0f9538d12b62c3129782567bd3a4

  • SHA512

    0418ff69e5a6c0c528f55243a40fb7911b00959d5f797981ca5771b4f2d824342aca731ab65fcf4eda0fac76078adadd8e1dc47054bf66d245175349aabdf449

  • SSDEEP

    6144:8huhRSqZqa3/fc/UmKyIxLDXXoq9FJZCX:8huHSqe32XXf9DoX

Score
10/10
persistence

Malware Config

Targets

    • Target

      6551d8e2e6bcca22a489932ca22ee290_NeikiAnalytics.exe

    • Size

      256KB

    • MD5

      6551d8e2e6bcca22a489932ca22ee290

    • SHA1

      eeb6682955d6c29d9e80257420b5781d551a17ae

    • SHA256

      9e571d67ae346044d6893ead28e965a8532c0f9538d12b62c3129782567bd3a4

    • SHA512

      0418ff69e5a6c0c528f55243a40fb7911b00959d5f797981ca5771b4f2d824342aca731ab65fcf4eda0fac76078adadd8e1dc47054bf66d245175349aabdf449

    • SSDEEP

      6144:8huhRSqZqa3/fc/UmKyIxLDXXoq9FJZCX:8huHSqe32XXf9DoX

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks