Overview

overview

10

Static

static

3

663490c99c...cs.exe

windows7-x64

10

663490c99c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    663490c99cfd759bc8e5daed228bc830_NeikiAnalytics.exe

  • Size

    40KB

  • Sample

    240523-a76prafd6v

  • MD5

    663490c99cfd759bc8e5daed228bc830

  • SHA1

    32d60f2f8ac6bc40fc0d77e2eb75c6f9864299b5

  • SHA256

    e94068d3b3cbc6195884c4fcad91791f75b464317c16ce55b5ab98c6ec70f0be

  • SHA512

    13eeb5a5c28844490c7bd35d63f7e2dbc9511c90a931ec1946c09080135eeb39ea8c5219fd53e4c9b59a0efeeb7ff868020d94164c1197f124705a8599bcdddc

  • SSDEEP

    768:ZgPXwa8zwvrGtttTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZuB:Z4HvytttTZtTZtTZtTZtTZtTZtTZtTZi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      663490c99cfd759bc8e5daed228bc830_NeikiAnalytics.exe

    • Size

      40KB

    • MD5

      663490c99cfd759bc8e5daed228bc830

    • SHA1

      32d60f2f8ac6bc40fc0d77e2eb75c6f9864299b5

    • SHA256

      e94068d3b3cbc6195884c4fcad91791f75b464317c16ce55b5ab98c6ec70f0be

    • SHA512

      13eeb5a5c28844490c7bd35d63f7e2dbc9511c90a931ec1946c09080135eeb39ea8c5219fd53e4c9b59a0efeeb7ff868020d94164c1197f124705a8599bcdddc

    • SSDEEP

      768:ZgPXwa8zwvrGtttTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZtTZuB:Z4HvytttTZtTZtTZtTZtTZtTZtTZtTZi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks