Overview

overview

8

Static

static

1

61f84a57eb...cs.exe

windows7-x64

8

61f84a57eb...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    61f84a57ebb2c17806ead7d60b4af220_NeikiAnalytics.exe

  • Size

    313KB

  • Sample

    240524-v1bw1sdc7y

  • MD5

    61f84a57ebb2c17806ead7d60b4af220

  • SHA1

    0fb1f7385647e3e8ab0dec637a47c089e1e31459

  • SHA256

    819af7485b6033d897dee6b1968d2ca1a28b8bd06a4c827397e1ecec2d8b4535

  • SHA512

    ceb081dbca239c15b773e7c247f2f75119c913633eb825f80632d6858ea9ce0d3883779d939cdb9a62760bb8f8f56077b19919b0dc73ef6c77c137cc51883b76

  • SSDEEP

    6144:kBUXRj+pH95tf4YR0NECD4hZy9zDpjiBV+UdvrEFp7hKV5cI:W4apdr4YR0NpD4XuiBjvrEH7+5J

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      61f84a57ebb2c17806ead7d60b4af220_NeikiAnalytics.exe

    • Size

      313KB

    • MD5

      61f84a57ebb2c17806ead7d60b4af220

    • SHA1

      0fb1f7385647e3e8ab0dec637a47c089e1e31459

    • SHA256

      819af7485b6033d897dee6b1968d2ca1a28b8bd06a4c827397e1ecec2d8b4535

    • SHA512

      ceb081dbca239c15b773e7c247f2f75119c913633eb825f80632d6858ea9ce0d3883779d939cdb9a62760bb8f8f56077b19919b0dc73ef6c77c137cc51883b76

    • SSDEEP

      6144:kBUXRj+pH95tf4YR0NECD4hZy9zDpjiBV+UdvrEFp7hKV5cI:W4apdr4YR0NpD4XuiBjvrEH7+5J

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks