Overview

overview

8

Static

static

7

a7456fda1f...cs.exe

windows7-x64

8

a7456fda1f...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7456fda1f3e42824ff2a183cd86bf10_NeikiAnalytics.exe

  • Size

    35KB

  • Sample

    240524-e4hkzadc63

  • MD5

    a7456fda1f3e42824ff2a183cd86bf10

  • SHA1

    8f8689bbe626e62734c397332a082e0135a0ce85

  • SHA256

    8b05263fe8152ea9b5199b8b019892dfab91687a6bfa867a7480d0717b6b9d25

  • SHA512

    83f53bccf5589ec000dec91c159442fcbd748f699de0a84b51f6d43fe4e2257c11abc2b6e0308e27b65c7329157d3a8d8b4fa0a0619ee9b23a388a55e7a1cd9f

  • SSDEEP

    768:OWMRMO8nnF1Yt/ybUZkFPd8wpS9hucD5+KwqGKQm:OL8nM5ybQ/4YhT3wqJ

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a7456fda1f3e42824ff2a183cd86bf10_NeikiAnalytics.exe

    • Size

      35KB

    • MD5

      a7456fda1f3e42824ff2a183cd86bf10

    • SHA1

      8f8689bbe626e62734c397332a082e0135a0ce85

    • SHA256

      8b05263fe8152ea9b5199b8b019892dfab91687a6bfa867a7480d0717b6b9d25

    • SHA512

      83f53bccf5589ec000dec91c159442fcbd748f699de0a84b51f6d43fe4e2257c11abc2b6e0308e27b65c7329157d3a8d8b4fa0a0619ee9b23a388a55e7a1cd9f

    • SSDEEP

      768:OWMRMO8nnF1Yt/ybUZkFPd8wpS9hucD5+KwqGKQm:OL8nM5ybQ/4YhT3wqJ

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks