Overview

overview

10

Static

static

3

65b2489f0f...cs.exe

windows7-x64

10

65b2489f0f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65b2489f0fb28cdefb8e5d26d7888700_NeikiAnalytics.exe

  • Size

    45KB

  • Sample

    240523-a6j5csfe59

  • MD5

    65b2489f0fb28cdefb8e5d26d7888700

  • SHA1

    9c0e97b6a1f77c452a3b5b8f9d98d2a62fe351a4

  • SHA256

    dc80a29776a3b2c4319b7ec2ebc6443c6dde1472bd93159ca74e08486567af43

  • SHA512

    13e9fd94bdaa0fafaf7c618fe921e1764f56d4dab49b0123f85d7be6f2c7601a4e66678d93f3c3c0f5ed06a127e7cbea6ee547fc1cd0b248e5915bd9c1b98a2e

  • SSDEEP

    768:2mFQj8rM9whcqet8WfYUtT92S21XFXRnnePxCXNvF7DFK+5nED:8AwEmBj3EXHn4x+9aD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      65b2489f0fb28cdefb8e5d26d7888700_NeikiAnalytics.exe

    • Size

      45KB

    • MD5

      65b2489f0fb28cdefb8e5d26d7888700

    • SHA1

      9c0e97b6a1f77c452a3b5b8f9d98d2a62fe351a4

    • SHA256

      dc80a29776a3b2c4319b7ec2ebc6443c6dde1472bd93159ca74e08486567af43

    • SHA512

      13e9fd94bdaa0fafaf7c618fe921e1764f56d4dab49b0123f85d7be6f2c7601a4e66678d93f3c3c0f5ed06a127e7cbea6ee547fc1cd0b248e5915bd9c1b98a2e

    • SSDEEP

      768:2mFQj8rM9whcqet8WfYUtT92S21XFXRnnePxCXNvF7DFK+5nED:8AwEmBj3EXHn4x+9aD

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables use of System Restore points

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks