Overview

overview

10

Static

static

3

1e9b2bf52f...cs.exe

windows7-x64

10

1e9b2bf52f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e9b2bf52faa4a334e10dcb54f2d5fb0_NeikiAnalytics.exe

  • Size

    320KB

  • Sample

    240523-kwgllabd72

  • MD5

    1e9b2bf52faa4a334e10dcb54f2d5fb0

  • SHA1

    0fd9a0618bedd6257346405f486ae08ad380ae98

  • SHA256

    2ec4087b541275b888ee82218a65f6e05d9cc7f54edb573c2eb96f35ea53ac20

  • SHA512

    c3be6d34a600635fb2d1c1bdd32c4f35cd0d06c88fe47638a8aaa5232afbaba079ffd340e0d0cfdcf5cc47fd62eef91828e45e011c58421066b2a1892ef497fa

  • SSDEEP

    6144:xX2epCscj/JvlaY/m05XUEtMEX6vluZV4U/vlf0DrBqvl8ZV4U/vlfl+9Q:xmcCsc9v3m05XEvG6IveDVqvQ6IvP

Score
10/10
persistence

Malware Config

Targets

    • Target

      1e9b2bf52faa4a334e10dcb54f2d5fb0_NeikiAnalytics.exe

    • Size

      320KB

    • MD5

      1e9b2bf52faa4a334e10dcb54f2d5fb0

    • SHA1

      0fd9a0618bedd6257346405f486ae08ad380ae98

    • SHA256

      2ec4087b541275b888ee82218a65f6e05d9cc7f54edb573c2eb96f35ea53ac20

    • SHA512

      c3be6d34a600635fb2d1c1bdd32c4f35cd0d06c88fe47638a8aaa5232afbaba079ffd340e0d0cfdcf5cc47fd62eef91828e45e011c58421066b2a1892ef497fa

    • SSDEEP

      6144:xX2epCscj/JvlaY/m05XUEtMEX6vluZV4U/vlf0DrBqvl8ZV4U/vlfl+9Q:xmcCsc9v3m05XEvG6IveDVqvQ6IvP

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks