Overview

overview

10

Static

static

3

3875a6edd0...cs.exe

windows7-x64

10

3875a6edd0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3875a6edd0c474f1a9f8d3799d627250_NeikiAnalytics.exe

  • Size

    416KB

  • Sample

    240525-3sh95aeh4y

  • MD5

    3875a6edd0c474f1a9f8d3799d627250

  • SHA1

    d787c08aea5f5b8117c21508cd002d3c512db414

  • SHA256

    b89c0d42e5fe44f654d6485b2a5922a0bf3006b149e3f716bdd45d46143bd613

  • SHA512

    355deca2641f1a004bf19511ec07b20921205a1f8876ac367234aba1a6033b454320219b240d64237d0d0cd9881ca749f22903299e084fb669cbc268e36d4048

  • SSDEEP

    3072:iQ9CsWxFTXyVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWP:TWLiRs+HLlD0rN2ZwVht740PP

Score
10/10
persistence

Malware Config

Targets

    • Target

      3875a6edd0c474f1a9f8d3799d627250_NeikiAnalytics.exe

    • Size

      416KB

    • MD5

      3875a6edd0c474f1a9f8d3799d627250

    • SHA1

      d787c08aea5f5b8117c21508cd002d3c512db414

    • SHA256

      b89c0d42e5fe44f654d6485b2a5922a0bf3006b149e3f716bdd45d46143bd613

    • SHA512

      355deca2641f1a004bf19511ec07b20921205a1f8876ac367234aba1a6033b454320219b240d64237d0d0cd9881ca749f22903299e084fb669cbc268e36d4048

    • SSDEEP

      3072:iQ9CsWxFTXyVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWP:TWLiRs+HLlD0rN2ZwVht740PP

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks