Overview

overview

10

Static

static

3

a50a4ffc13...cs.exe

windows7-x64

10

a50a4ffc13...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a50a4ffc13789c21f4ca3bb26ac772e0_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240524-ewc1hsch6s

  • MD5

    a50a4ffc13789c21f4ca3bb26ac772e0

  • SHA1

    5f6594a2bb6a46bb95c6b701595925c271c7d4e5

  • SHA256

    ae583673f063754f706c4f6b999b7050304b148052e24559d81482045ef9f054

  • SHA512

    b5872eac86fc8e5b6593dcd3d0bd3e520d2cbfa4c173d32cc4300138fdf431daa4be77935a1b933e2d68b3b1325e6727ef22494b1e6f862bd46290b564d9281e

  • SSDEEP

    1536:xjwJoosva/cbBJ8LneoOO6S5rWoaNTwwwwwwwwwvi:j//8LeoOoJaNWi

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      a50a4ffc13789c21f4ca3bb26ac772e0_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      a50a4ffc13789c21f4ca3bb26ac772e0

    • SHA1

      5f6594a2bb6a46bb95c6b701595925c271c7d4e5

    • SHA256

      ae583673f063754f706c4f6b999b7050304b148052e24559d81482045ef9f054

    • SHA512

      b5872eac86fc8e5b6593dcd3d0bd3e520d2cbfa4c173d32cc4300138fdf431daa4be77935a1b933e2d68b3b1325e6727ef22494b1e6f862bd46290b564d9281e

    • SSDEEP

      1536:xjwJoosva/cbBJ8LneoOO6S5rWoaNTwwwwwwwwwvi:j//8LeoOoJaNWi

    Score
    10/10
    evasionpersistencetrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Defense Evasion

Impair Defenses

2
T1562

Disable or Modify Tools

2
T1562.001

Modify Registry

5
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks