Overview

overview

10

Static

static

3

7868d805ce...cs.exe

windows7-x64

10

7868d805ce...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7868d805ce1d3fdcc539238cadff80f0_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240523-czjalaah38

  • MD5

    7868d805ce1d3fdcc539238cadff80f0

  • SHA1

    32be0cadd3d7662a12f8458aa50f557c1408466c

  • SHA256

    f207e8be863a68075bb01a862fa73a865afee43851ddf3741297a82b3689f084

  • SHA512

    95db88bf804e17923e3aff20c8c376853e9185071b7cdb366ab8d55cba4a254e1e361a0d61bba93efe8a7e821d378199e1236edfd0584e83ec6ac357d7a47cd8

  • SSDEEP

    6144:Iy/A+HGhxjVJyE5ZC2npb+oB+Zz2HG8t0DoEWufVuvw0HBHY8rQ+6bPD3wPSk8ym:ZHOVsAbaz22cWfVaw0HBHY8r8ABjMn

Score
10/10
persistence

Malware Config

Targets

    • Target

      7868d805ce1d3fdcc539238cadff80f0_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      7868d805ce1d3fdcc539238cadff80f0

    • SHA1

      32be0cadd3d7662a12f8458aa50f557c1408466c

    • SHA256

      f207e8be863a68075bb01a862fa73a865afee43851ddf3741297a82b3689f084

    • SHA512

      95db88bf804e17923e3aff20c8c376853e9185071b7cdb366ab8d55cba4a254e1e361a0d61bba93efe8a7e821d378199e1236edfd0584e83ec6ac357d7a47cd8

    • SSDEEP

      6144:Iy/A+HGhxjVJyE5ZC2npb+oB+Zz2HG8t0DoEWufVuvw0HBHY8rQ+6bPD3wPSk8ym:ZHOVsAbaz22cWfVaw0HBHY8r8ABjMn

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks