Overview

overview

7

Static

static

3

5db11b7cc6...cs.exe

windows7-x64

7

5db11b7cc6...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5db11b7cc651d576ee107c1f54b3da50_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240523-aap1qseb45

  • MD5

    5db11b7cc651d576ee107c1f54b3da50

  • SHA1

    89add9c1662b7a32e5cde5dff4d7ad5f37ee311b

  • SHA256

    f45aed8528cb265364c4ed6e9f835bd9e7c0d9db564a5a1e42fdbd3ae58c67de

  • SHA512

    3409b8047f4f9215429784fd8287af3f91fc140ee52d24689c4b1cf3a93f108bc7915de146499d5f93043bf3706c7358423db0b3f93e2c66790305b5dda4cb86

  • SSDEEP

    3072:vAowVFgjQiUkEwtSXqhwDKopH0njnIInjjnjjjjjjjnjjnjnjnP01EBtRitYUhRy:oAjTUkf7

Score
7/10
persistence

Malware Config

Targets

    • Target

      5db11b7cc651d576ee107c1f54b3da50_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      5db11b7cc651d576ee107c1f54b3da50

    • SHA1

      89add9c1662b7a32e5cde5dff4d7ad5f37ee311b

    • SHA256

      f45aed8528cb265364c4ed6e9f835bd9e7c0d9db564a5a1e42fdbd3ae58c67de

    • SHA512

      3409b8047f4f9215429784fd8287af3f91fc140ee52d24689c4b1cf3a93f108bc7915de146499d5f93043bf3706c7358423db0b3f93e2c66790305b5dda4cb86

    • SSDEEP

      3072:vAowVFgjQiUkEwtSXqhwDKopH0njnIInjjnjjjjjjjnjjnjnjnP01EBtRitYUhRy:oAjTUkf7

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks