Overview

overview

10

Static

static

7

452fc3a158...cs.exe

windows7-x64

10

452fc3a158...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    452fc3a1584096dd5c0edb9a76a0baa0_NeikiAnalytics.exe

  • Size

    23KB

  • Sample

    240524-xt9ktagb53

  • MD5

    452fc3a1584096dd5c0edb9a76a0baa0

  • SHA1

    f647e71ae65d4e0952fe4b3358d6ba8b299c1fa0

  • SHA256

    db263dc961899c7344929d7b31689d604f595d7ab882957cb9580b6d08f4f9f3

  • SHA512

    d0306af79d42c849b47b0687eade752a3b2a1b8d769468b0e0414e09f27e4378483244b2196016ff0308ad8a61da7ea73f043ff5c3e98296a4b99d9f0f4cccf9

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXVB7JmvI:rRkiLw3HsDSARGG/rn

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      452fc3a1584096dd5c0edb9a76a0baa0_NeikiAnalytics.exe

    • Size

      23KB

    • MD5

      452fc3a1584096dd5c0edb9a76a0baa0

    • SHA1

      f647e71ae65d4e0952fe4b3358d6ba8b299c1fa0

    • SHA256

      db263dc961899c7344929d7b31689d604f595d7ab882957cb9580b6d08f4f9f3

    • SHA512

      d0306af79d42c849b47b0687eade752a3b2a1b8d769468b0e0414e09f27e4378483244b2196016ff0308ad8a61da7ea73f043ff5c3e98296a4b99d9f0f4cccf9

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXVB7JmvI:rRkiLw3HsDSARGG/rn

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks