Overview

overview

10

Static

static

3

6c3bd205b9...cs.exe

windows7-x64

10

6c3bd205b9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c3bd205b9ef9e4a470b92820501f5f0_NeikiAnalytics.exe

  • Size

    91KB

  • Sample

    240523-brbp4sge75

  • MD5

    6c3bd205b9ef9e4a470b92820501f5f0

  • SHA1

    b8b437b6032c0d4738b8164b4985e25f427b7d98

  • SHA256

    dc77d23597ecdd1788210c5d75287e659266971a18d26acff953e5b2b3edefda

  • SHA512

    77ad6be81a75957838f866b451210e594c78e401d9ef4bad21e16fe55ae7cd0cbb6317c75ba9c86066e4676ee5ef010fa3d51c566b6a838bfa4219b5a6b72b0c

  • SSDEEP

    1536:G1tvXhI0c7gdV/ZnoIQe5WQbKsmEjQHj3cVXZYr/viVMi:k1hI0mIXPt81smEjWSpo/vOMi

Score
10/10
persistence

Malware Config

Targets

    • Target

      6c3bd205b9ef9e4a470b92820501f5f0_NeikiAnalytics.exe

    • Size

      91KB

    • MD5

      6c3bd205b9ef9e4a470b92820501f5f0

    • SHA1

      b8b437b6032c0d4738b8164b4985e25f427b7d98

    • SHA256

      dc77d23597ecdd1788210c5d75287e659266971a18d26acff953e5b2b3edefda

    • SHA512

      77ad6be81a75957838f866b451210e594c78e401d9ef4bad21e16fe55ae7cd0cbb6317c75ba9c86066e4676ee5ef010fa3d51c566b6a838bfa4219b5a6b72b0c

    • SSDEEP

      1536:G1tvXhI0c7gdV/ZnoIQe5WQbKsmEjQHj3cVXZYr/viVMi:k1hI0mIXPt81smEjWSpo/vOMi

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks