Overview

overview

10

Static

static

3

72ebd686f1...cs.exe

windows7-x64

10

72ebd686f1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72ebd686f1af067a1f348f712056f870_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240523-cegahahf5z

  • MD5

    72ebd686f1af067a1f348f712056f870

  • SHA1

    fd6a91442d4e807611924b2b8f559da73fe1b884

  • SHA256

    d7526f48734e68b5c99c25f867fe1e0c41aa24aaf151908bd0681a9df3368d96

  • SHA512

    35489f2bd9d6296db4454b365140efe8de734d4b327250a06a1326c7963ab3555da3875ce8d61b3735e196310d0bfeb88f4652bb787e12976568fdcfad88d1b6

  • SSDEEP

    1536:2QIw5oPGRsLEuA5brfcDy5JRkvRf9hwSa2zcM:ywCuRsLEu8JGvx9hXaJ

Score
10/10
persistence

Malware Config

Targets

    • Target

      72ebd686f1af067a1f348f712056f870_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      72ebd686f1af067a1f348f712056f870

    • SHA1

      fd6a91442d4e807611924b2b8f559da73fe1b884

    • SHA256

      d7526f48734e68b5c99c25f867fe1e0c41aa24aaf151908bd0681a9df3368d96

    • SHA512

      35489f2bd9d6296db4454b365140efe8de734d4b327250a06a1326c7963ab3555da3875ce8d61b3735e196310d0bfeb88f4652bb787e12976568fdcfad88d1b6

    • SSDEEP

      1536:2QIw5oPGRsLEuA5brfcDy5JRkvRf9hwSa2zcM:ywCuRsLEu8JGvx9hXaJ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks