Overview

overview

8

Static

static

3

6df5cea005...cs.exe

windows7-x64

8

6df5cea005...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6df5cea00534b59dd3e1c77fef88e820_NeikiAnalytics.exe

  • Size

    61KB

  • Sample

    240523-bxmpkagf71

  • MD5

    6df5cea00534b59dd3e1c77fef88e820

  • SHA1

    761291f1ef924546ca71892a6ebecdfc48f4649d

  • SHA256

    949d9e66f4f964f9d96d5f80d0e7a68397b50a37b8b9de0b217feb0deb170026

  • SHA512

    6135a2b23afb6772f3b0a73f0b891e518177b24d041eee7029ba4795138d7f623b8a1533f8c87c435a68f583b8fbc250b4eb0e7722c00f22e9ba9a34ccfdc89a

  • SSDEEP

    1536:IkFbk5BoYFUOnUevuMTQn4gFTk57TVcrwNMxcgY:IkbYwsuVniXJgY

Score
8/10
persistence

Malware Config

Targets

    • Target

      6df5cea00534b59dd3e1c77fef88e820_NeikiAnalytics.exe

    • Size

      61KB

    • MD5

      6df5cea00534b59dd3e1c77fef88e820

    • SHA1

      761291f1ef924546ca71892a6ebecdfc48f4649d

    • SHA256

      949d9e66f4f964f9d96d5f80d0e7a68397b50a37b8b9de0b217feb0deb170026

    • SHA512

      6135a2b23afb6772f3b0a73f0b891e518177b24d041eee7029ba4795138d7f623b8a1533f8c87c435a68f583b8fbc250b4eb0e7722c00f22e9ba9a34ccfdc89a

    • SSDEEP

      1536:IkFbk5BoYFUOnUevuMTQn4gFTk57TVcrwNMxcgY:IkbYwsuVniXJgY

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks